📂 FileMgr
📍
/var/www/vhosts/nursoft.al/logs/immopoint-frankfurt.de
✏️ Edit File: /var/www/vhosts/nursoft.al/logs/immopoint-frankfurt.de/access_log.processed
⬅ Kembali
162.158.178.21 - - [18/Nov/2025:21:55:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.229.14 - - [18/Nov/2025:22:15:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" 104.23.217.46 - - [18/Nov/2025:22:42:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.150.64 - - [18/Nov/2025:23:24:21 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" 172.71.150.64 - - [18/Nov/2025:23:24:21 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36 OPR/106.0.0.0" 172.71.150.64 - - [18/Nov/2025:23:24:21 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.5414.120 Safari/537.36" 172.71.150.64 - - [18/Nov/2025:23:24:21 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/24.0 Chrome/120.0.6099.144 Mobile Safari/537.36" 172.71.150.64 - - [18/Nov/2025:23:24:21 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 172.71.150.64 - - [18/Nov/2025:23:24:21 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.56 Mobile Safari/537.36" 172.71.150.64 - - [18/Nov/2025:23:24:21 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.20 Safari/537.36" 104.23.168.18 - - [18/Nov/2025:23:29:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.47.29 - - [18/Nov/2025:23:56:19 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.110.68 - - [18/Nov/2025:23:56:19 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.239.84 - - [18/Nov/2025:23:56:19 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.144.21 - - [18/Nov/2025:23:56:19 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.168.108 - - [18/Nov/2025:23:56:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.239.85 - - [18/Nov/2025:23:56:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.47.29 - - [18/Nov/2025:23:56:19 +0100] "POST /graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.144.20 - - [18/Nov/2025:23:56:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.63933643a353138363a3a343330333a303037343a363036323; +https://leakix.net)" 172.71.172.20 - - [18/Nov/2025:23:56:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.13434336a333433616a3a303330333a303037343a363036323; +https://leakix.net)" 172.71.172.21 - - [18/Nov/2025:23:56:20 +0100] "POST /graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.103.106 - - [18/Nov/2025:23:56:20 +0100] "POST /api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.94.201 - - [18/Nov/2025:23:56:20 +0100] "POST /api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.170.72 - - [18/Nov/2025:23:56:20 +0100] "POST /api/graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.168.108 - - [18/Nov/2025:23:56:20 +0100] "POST /graphql/api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.240.205 - - [18/Nov/2025:23:56:20 +0100] "POST /api/graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.240.205 - - [18/Nov/2025:23:56:21 +0100] "POST /graphql/api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.99.50 - - [18/Nov/2025:23:56:21 +0100] "POST /api/gql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.172.20 - - [18/Nov/2025:23:56:21 +0100] "POST /api/gql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.99.50 - - [18/Nov/2025:23:56:21 +0100] "GET /swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.246.101 - - [18/Nov/2025:23:56:21 +0100] "GET /swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 141.101.76.58 - - [18/Nov/2025:23:56:21 +0100] "GET /swagger/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.239.84 - - [18/Nov/2025:23:56:21 +0100] "GET /swagger/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.103.106 - - [18/Nov/2025:23:56:21 +0100] "GET /swagger/swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.240.205 - - [18/Nov/2025:23:56:21 +0100] "GET /swagger/swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.240.205 - - [18/Nov/2025:23:56:21 +0100] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.172.10 - - [18/Nov/2025:23:56:22 +0100] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.103.106 - - [18/Nov/2025:23:56:22 +0100] "GET /swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.248.172 - - [18/Nov/2025:23:56:22 +0100] "GET /swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.47.29 - - [18/Nov/2025:23:56:22 +0100] "GET /swagger/v1/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.246.101 - - [18/Nov/2025:23:56:22 +0100] "GET /swagger/v1/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.94.201 - - [18/Nov/2025:23:56:22 +0100] "GET /v2/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.166.168 - - [18/Nov/2025:23:56:22 +0100] "GET /v2/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.170.72 - - [18/Nov/2025:23:56:22 +0100] "GET /v3/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.172.21 - - [18/Nov/2025:23:56:22 +0100] "GET /v3/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.170.72 - - [18/Nov/2025:23:56:22 +0100] "GET /api-docs/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.103.106 - - [18/Nov/2025:23:56:23 +0100] "GET /api/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.69.150.136 - - [18/Nov/2025:23:56:23 +0100] "GET /api-docs/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.239.85 - - [18/Nov/2025:23:56:23 +0100] "GET /api/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.183.105 - - [18/Nov/2025:23:56:23 +0100] "GET /@vite/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.239.84 - - [18/Nov/2025:23:56:23 +0100] "GET /@vite/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.166.168 - - [18/Nov/2025:23:56:23 +0100] "GET /actuator/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.248.172 - - [18/Nov/2025:23:56:23 +0100] "GET /actuator/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.246.101 - - [18/Nov/2025:23:56:23 +0100] "GET /server HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.47.29 - - [18/Nov/2025:23:56:23 +0100] "GET /server HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.69.150.136 - - [18/Nov/2025:23:56:24 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.170.72 - - [18/Nov/2025:23:56:24 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.69.150.136 - - [18/Nov/2025:23:56:24 +0100] "GET /about HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.170.72 - - [18/Nov/2025:23:56:24 +0100] "GET /about HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.170.72 - - [18/Nov/2025:23:56:24 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [18/Nov/2025:23:56:24 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.166.168 - - [18/Nov/2025:23:56:24 +0100] "GET /v2/_catalog HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [18/Nov/2025:23:56:24 +0100] "GET /v2/_catalog HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.168.108 - - [18/Nov/2025:23:56:24 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.172.20 - - [18/Nov/2025:23:56:24 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.99.50 - - [18/Nov/2025:23:56:24 +0100] "GET /server-status HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [18/Nov/2025:23:56:24 +0100] "GET /server-status HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.103.106 - - [18/Nov/2025:23:56:25 +0100] "GET /login.action HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.168.108 - - [18/Nov/2025:23:56:25 +0100] "GET /_all_dbs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.239.46 - - [18/Nov/2025:23:56:25 +0100] "GET /login.action HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.166.168 - - [18/Nov/2025:23:56:25 +0100] "GET /.DS_Store HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.144.21 - - [18/Nov/2025:23:56:25 +0100] "GET /_all_dbs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.172.10 - - [18/Nov/2025:23:56:25 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.248.172 - - [18/Nov/2025:23:56:25 +0100] "GET /.DS_Store HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.94.201 - - [18/Nov/2025:23:56:25 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.95.129 - - [18/Nov/2025:23:56:25 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.69.150.136 - - [18/Nov/2025:23:56:25 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.168.108 - - [18/Nov/2025:23:56:25 +0100] "GET /s/035313e26373e21323e2430313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.94.201 - - [18/Nov/2025:23:56:26 +0100] "GET /s/5363e2639313e27363e2237313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.170.72 - - [18/Nov/2025:23:56:26 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.248.172 - - [18/Nov/2025:23:56:26 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.103.106 - - [18/Nov/2025:23:56:26 +0100] "GET /telescope/requests HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [18/Nov/2025:23:56:26 +0100] "GET /telescope/requests HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.170.72 - - [18/Nov/2025:23:56:26 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.94.201 - - [18/Nov/2025:23:56:26 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.170.72 - - [18/Nov/2025:23:56:26 +0100] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [18/Nov/2025:23:56:26 +0100] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.124.48 - - [18/Nov/2025:23:57:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 162.158.171.5 - - [18/Nov/2025:23:57:25 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 172.69.130.115 - - [18/Nov/2025:23:57:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 172.71.166.199 - - [18/Nov/2025:23:57:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.94.125 - - [18/Nov/2025:23:58:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 172.71.166.199 - - [19/Nov/2025:00:24:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 172.69.130.114 - - [19/Nov/2025:01:28:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.179.194 - - [19/Nov/2025:01:28:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.69.130.114 - - [19/Nov/2025:01:28:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.179.194 - - [19/Nov/2025:01:28:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.175.111 - - [19/Nov/2025:04:45:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.103.105 - - [19/Nov/2025:05:25:21 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.71.194.123 - - [19/Nov/2025:05:39:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 172.69.150.136 - - [19/Nov/2025:05:39:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 172.71.178.110 - - [19/Nov/2025:06:42:29 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 172.69.150.137 - - [19/Nov/2025:06:42:29 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 172.69.95.117 - - [19/Nov/2025:06:46:55 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.134 Safari/537.36" 172.69.109.216 - - [19/Nov/2025:07:18:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/29.0 Chrome/136.0.0.0 Safari/537.36" 172.71.160.60 - - [19/Nov/2025:07:30:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/29.0 Chrome/136.0.0.0 Mobile Safari/537.36" 172.71.194.247 - - [19/Nov/2025:09:11:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 162.158.14.34 - - [19/Nov/2025:09:11:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 162.158.183.69 - - [19/Nov/2025:09:39:56 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 162.158.182.193 - - [19/Nov/2025:09:39:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 172.70.94.172 - - [19/Nov/2025:10:27:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.68.2.109 - - [19/Nov/2025:13:13:32 +0100] "GET /.well-known/acme-challenge/vf_R8kGWIwrGA0bfWrbisScoLZtxQ-touBV5hjJfusI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.160.203 - - [19/Nov/2025:13:13:32 +0100] "GET /.well-known/acme-challenge/vf_R8kGWIwrGA0bfWrbisScoLZtxQ-touBV5hjJfusI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.71.254.16 - - [19/Nov/2025:13:13:32 +0100] "GET /.well-known/acme-challenge/vf_R8kGWIwrGA0bfWrbisScoLZtxQ-touBV5hjJfusI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 162.158.182.193 - - [19/Nov/2025:13:13:33 +0100] "GET /.well-known/acme-challenge/vf_R8kGWIwrGA0bfWrbisScoLZtxQ-touBV5hjJfusI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.70.142.37 - - [19/Nov/2025:13:13:33 +0100] "GET /.well-known/acme-challenge/vf_R8kGWIwrGA0bfWrbisScoLZtxQ-touBV5hjJfusI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.251.229 - - [19/Nov/2025:13:13:35 +0100] "GET /.well-known/acme-challenge/Cb4ZpvyMfMES5j_OkhLgDgml8sjDknK8799N6ceeoeY HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.69.17.18 - - [19/Nov/2025:13:13:35 +0100] "GET /.well-known/acme-challenge/Cb4ZpvyMfMES5j_OkhLgDgml8sjDknK8799N6ceeoeY HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.160.232 - - [19/Nov/2025:13:13:36 +0100] "GET /.well-known/acme-challenge/Cb4ZpvyMfMES5j_OkhLgDgml8sjDknK8799N6ceeoeY HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.223.132 - - [19/Nov/2025:13:13:36 +0100] "GET /.well-known/acme-challenge/Cb4ZpvyMfMES5j_OkhLgDgml8sjDknK8799N6ceeoeY HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.69.176.51 - - [19/Nov/2025:13:13:36 +0100] "GET /.well-known/acme-challenge/Cb4ZpvyMfMES5j_OkhLgDgml8sjDknK8799N6ceeoeY HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.69.222.95 - - [19/Nov/2025:14:27:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 162.158.175.91 - - [19/Nov/2025:14:39:55 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.69.87.95 - - [19/Nov/2025:16:13:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.69.95.42 - - [19/Nov/2025:16:13:31 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.71.147.154 - - [19/Nov/2025:17:30:22 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 172.71.147.154 - - [19/Nov/2025:17:30:22 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36 OPR/106.0.0.0" 172.71.147.154 - - [19/Nov/2025:17:30:22 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 172.71.147.154 - - [19/Nov/2025:17:30:22 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 172.71.147.154 - - [19/Nov/2025:17:30:22 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" 172.71.147.154 - - [19/Nov/2025:17:30:22 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 172.71.147.154 - - [19/Nov/2025:17:30:22 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/24.0 Chrome/120.0.6099.144 Mobile Safari/537.36" 172.69.196.134 - - [19/Nov/2025:18:06:31 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.86 Safari/537.36 Brave/1.62.162" 172.69.196.134 - - [19/Nov/2025:18:06:32 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" 172.69.196.134 - - [19/Nov/2025:18:06:32 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.86 Safari/537.36 Brave/1.62.162" 172.69.196.134 - - [19/Nov/2025:18:06:32 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.69.196.134 - - [19/Nov/2025:18:06:33 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.140 Safari/537.36 Vivaldi/6.4.3160.47" 172.69.196.134 - - [19/Nov/2025:18:06:33 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 172.69.196.134 - - [19/Nov/2025:18:06:33 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 172.70.50.158 - - [19/Nov/2025:19:17:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 104.23.175.156 - - [19/Nov/2025:22:08:50 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.64.223.7 - - [19/Nov/2025:22:29:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.58.100 - - [19/Nov/2025:23:00:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone SE (2nd generation); CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.66 Mobile/18G1393 Safari/604.1.38" 104.23.229.112 - - [19/Nov/2025:23:00:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.68.151.106 - - [20/Nov/2025:00:04:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0" 172.70.50.159 - - [20/Nov/2025:00:04:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 172.68.159.131 - - [20/Nov/2025:00:04:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.71.122.34 - - [20/Nov/2025:00:06:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1" 104.23.229.69 - - [20/Nov/2025:00:08:05 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0" 172.68.12.98 - - [20/Nov/2025:00:13:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.95.137 - - [20/Nov/2025:01:30:04 +0100] "GET //ajax.googleapis.com/ajax/libs/jquery/1.8.1/jquery.min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 162.159.113.67 - - [20/Nov/2025:01:30:35 +0100] "GET //ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.50 Safari/537.36" 172.71.99.151 - - [20/Nov/2025:01:31:30 +0100] "GET //connect.facebook.net/en_GB/sdk.js HTTP/1.1" 301 162 "-" "SAMSUNG-SGH-E250/1.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Browser/6.2.3.3.c.1.101 (GUI) MMP/2.0 (compatible; Googlebot-Mobile/2.1; http://www.google.com/bot.html)" 172.71.99.194 - - [20/Nov/2025:01:31:31 +0100] "GET /modernizr.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36" 141.101.76.58 - - [20/Nov/2025:01:31:32 +0100] "GET /main.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Mobile Safari/537.36" 172.71.99.155 - - [20/Nov/2025:01:31:32 +0100] "GET //code.jquery.com/jquery-latest.js HTTP/1.1" 301 162 "-" "Opera/9.80 (Android; Opera Mini/42.0.2254/150.36; U; en) Presto/2.12.423 Version/12.16" 172.70.46.55 - - [20/Nov/2025:01:31:32 +0100] "GET //cdnjs.cloudflare.com/ajax/libs/cookieconsent2/1.0.9/cookieconsent.min.js HTTP/1.1" 301 162 "-" "Wget/1.9 cvs-stable (Red Hat modified)" 162.159.113.64 - - [20/Nov/2025:01:31:32 +0100] "GET /jquery.flexslider-min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 GTB5" 104.23.170.187 - - [20/Nov/2025:01:31:32 +0100] "GET //maxcdn.bootstrapcdn.com/bootstrap/3.3.4/js/bootstrap.min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.15 (KHTML, like Gecko) Ubuntu/10.10 Chromium/10.0.613.0 Chrome/10.0.613.0 Safari/534.15" 162.158.88.110 - - [20/Nov/2025:02:22:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F)" 162.158.88.89 - - [20/Nov/2025:02:22:09 +0100] "GET /wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F)" 172.71.164.110 - - [20/Nov/2025:02:24:15 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 162.158.110.69 - - [20/Nov/2025:02:26:02 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:24:57 +0100] "GET /new4.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:00 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:00 +0100] "GET /ava.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.190.208 - - [20/Nov/2025:03:25:00 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:01 +0100] "GET /pow.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.190.208 - - [20/Nov/2025:03:25:02 +0100] "GET /zuk.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:02 +0100] "GET /fss.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.190.208 - - [20/Nov/2025:03:25:02 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:02 +0100] "GET /core.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:04 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.190.208 - - [20/Nov/2025:03:25:05 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:06 +0100] "GET /fox.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:10 +0100] "GET /wp-content/plugins/wpsearch/login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:11 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.190.208 - - [20/Nov/2025:03:25:11 +0100] "GET /sts.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.190.208 - - [20/Nov/2025:03:25:11 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.190.208 - - [20/Nov/2025:03:25:12 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:12 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:13 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:13 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:13 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:14 +0100] "GET /akc.php?p= HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:14 +0100] "GET /app/webroot/filemanager.php?p= HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.191.74 - - [20/Nov/2025:03:25:14 +0100] "GET /asasx.php?p= HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:14 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:15 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:15 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:15 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:16 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:16 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:16 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:16 +0100] "GET /dropdown.php?p= HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:17 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:17 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:17 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:18 +0100] "GET /makeasmtp.php?p= HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:18 +0100] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:18 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:19 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:19 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:19 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:20 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:20 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:21 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:21 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:22 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:22 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:22 +0100] "GET /wp-admin/includes HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:23 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.191.74 - - [20/Nov/2025:03:25:23 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:23 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:24 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:24 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:24 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:25 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:26 +0100] "GET /ALFA_DATA/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:26 +0100] "GET /aaa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:26 +0100] "GET /admin/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:27 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:27 +0100] "GET /build.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:27 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:28 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:28 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:29 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:29 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:30 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:30 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:30 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:30 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:31 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:31 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:31 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:32 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:32 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:33 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:33 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:34 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:34 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:35 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:35 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:36 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.191.74 - - [20/Nov/2025:03:25:36 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:37 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:37 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:37 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.191.74 - - [20/Nov/2025:03:25:38 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:38 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:39 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:39 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:39 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:40 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:40 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:40 +0100] "GET /07.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:40 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:41 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.191.74 - - [20/Nov/2025:03:25:41 +0100] "GET /wp-sigunq.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:41 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:42 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:42 +0100] "GET /fw.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:42 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:43 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:43 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:43 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:43 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:45 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:46 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:46 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:47 +0100] "GET /wp-comments-post.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:48 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:48 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:49 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:50 +0100] "GET /plugins.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:50 +0100] "GET /post.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:50 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:50 +0100] "GET /geju.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:51 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:51 +0100] "GET /hoot.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:52 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:52 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:52 +0100] "GET /mail.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:53 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:53 +0100] "GET /content.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:53 +0100] "GET /upfile.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:54 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:54 +0100] "GET /bypass.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:55 +0100] "GET /404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:55 +0100] "GET /updates.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:55 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:56 +0100] "GET /ae.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:56 +0100] "GET /blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:56 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:57 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:57 +0100] "GET /as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:25:58 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:58 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:59 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:59 +0100] "GET /9.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:59 +0100] "GET /admin-ajax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:25:59 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:26:00 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:26:00 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:26:01 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:26:01 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:26:01 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:26:01 +0100] "GET /form.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.191.74 - - [20/Nov/2025:03:26:02 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:26:02 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [20/Nov/2025:03:26:03 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.191.74 - - [20/Nov/2025:03:26:03 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.85.166 - - [20/Nov/2025:04:18:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 172.69.135.23 - - [20/Nov/2025:05:19:42 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.70.54.72 - - [20/Nov/2025:06:17:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 141.101.76.59 - - [20/Nov/2025:07:15:45 +0100] "GET / HTTP/1.1" 301 162 "-" "python-httpx/0.28.1" 172.70.42.179 - - [20/Nov/2025:07:33:09 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.71.223.13 - - [20/Nov/2025:07:33:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 104.23.160.120 - - [20/Nov/2025:08:47:15 +0100] "GET //cdnjs.cloudflare.com/ajax/libs/cookieconsent2/1.0.9/cookieconsent.min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.1 Safari/605.1.15" 104.23.160.107 - - [20/Nov/2025:08:47:15 +0100] "GET //connect.facebook.net/en_GB/sdk.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 OPR/58.0.3135.107" 172.70.94.173 - - [20/Nov/2025:08:48:23 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.220.23 - - [20/Nov/2025:09:37:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.187.120 - - [20/Nov/2025:09:57:49 +0100] "GET //ajax.googleapis.com/ajax/libs/jquery/1.8.1/jquery.min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 11; SAMSUNG SM-A5070) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/17.0 Chrome/96.0.4664.104 Mobile Safari/537.36" 104.23.253.17 - - [20/Nov/2025:09:57:49 +0100] "GET /main.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux armv6l; rv 1.8.1.5pre) Gecko/20070619 Minimo/0.020" 172.70.111.198 - - [20/Nov/2025:09:58:12 +0100] "GET //ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; SM-G970U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36" 162.158.154.38 - - [20/Nov/2025:09:58:12 +0100] "GET //cdnjs.cloudflare.com/ajax/libs/cookieconsent2/1.0.9/cookieconsent.min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-A605G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.58 Mobile Safari/537.36" 172.70.114.3 - - [20/Nov/2025:09:58:12 +0100] "GET /jquery.flexslider-min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/536.26.17 (KHTML like Gecko) Version/6.0.2 Safari/536.26.17" 162.158.158.247 - - [20/Nov/2025:09:58:12 +0100] "GET //maxcdn.bootstrapcdn.com/bootstrap/3.3.4/js/bootstrap.min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" 104.23.253.142 - - [20/Nov/2025:09:58:29 +0100] "GET /modernizr.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.113 Safari/537.36" 162.159.119.31 - - [20/Nov/2025:09:58:29 +0100] "GET /jquery.lightbox.js HTTP/1.1" 301 162 "-" "ELinks (0.4.3; NetBSD 3.0.2PATCH sparc64; 141x19)" 172.70.250.218 - - [20/Nov/2025:10:18:33 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 162.158.94.201 - - [20/Nov/2025:10:19:46 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 172.70.108.96 - - [20/Nov/2025:10:53:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" 172.70.42.178 - - [20/Nov/2025:11:07:13 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.194.109 - - [20/Nov/2025:11:07:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.174.248 - - [20/Nov/2025:11:07:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.190.8 - - [20/Nov/2025:12:27:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 104.23.187.26 - - [20/Nov/2025:12:27:19 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://www.immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.70.255.76 - - [20/Nov/2025:13:31:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.70.174.248 - - [20/Nov/2025:13:57:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 162.158.217.148 - - [20/Nov/2025:14:00:54 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:00 +0100] "GET /neshe.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:01 +0100] "GET /shell1.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:02 +0100] "GET /sec.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:03 +0100] "GET /filesss.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:03 +0100] "GET /ea.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:04 +0100] "GET /gi.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:04 +0100] "GET /10.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:14 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:14 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:15 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:15 +0100] "GET /hi.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:16 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:16 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:17 +0100] "GET /article.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:17 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:18 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:18 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:18 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:19 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:19 +0100] "GET /dlu.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:20 +0100] "GET /zde.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:20 +0100] "GET /ifm.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:20 +0100] "GET /redi.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:21 +0100] "GET /fns.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:21 +0100] "GET /pent.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:22 +0100] "GET /wsx.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:23 +0100] "GET /r79.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:23 +0100] "GET /mpxct.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:24 +0100] "GET /x3.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:25 +0100] "GET /wan.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:25 +0100] "GET /iov.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:26 +0100] "GET /ouh.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:26 +0100] "GET /asgtt.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:27 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:27 +0100] "GET /wok.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:28 +0100] "GET /alexus.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:29 +0100] "GET /sadis.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:30 +0100] "GET /admir.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:30 +0100] "GET /file52.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:31 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:31 +0100] "GET /x0.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:31 +0100] "GET /wsr2.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:32 +0100] "GET /wolv.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:32 +0100] "GET /av.php.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:32 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:33 +0100] "GET /siln.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:33 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:34 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:34 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:35 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:36 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:36 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:37 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:37 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.126.202 - - [20/Nov/2025:14:01:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 162.158.217.148 - - [20/Nov/2025:14:01:37 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:38 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:38 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:39 +0100] "GET /d12.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:39 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:39 +0100] "GET /fileas.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:40 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:41 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:42 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 162.158.217.148 - - [20/Nov/2025:14:01:42 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.70.240.204 - - [20/Nov/2025:14:55:18 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 104.23.248.182 - - [20/Nov/2025:15:38:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.159.110.122 - - [20/Nov/2025:16:10:21 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:23 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:23 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:24 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:24 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:24 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:24 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:25 +0100] "GET /adminer.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:25 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:25 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:26 +0100] "GET /astab.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:26 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:26 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:27 +0100] "GET /bless2.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:27 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:27 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:28 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:28 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:28 +0100] "GET /cool.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:28 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:29 +0100] "GET /dejavu.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:29 +0100] "GET /faq.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:29 +0100] "GET /ffile.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:30 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:30 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:30 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:31 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:31 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:31 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:32 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:32 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:32 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:38 +0100] "GET /golden.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:38 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:38 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:39 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:39 +0100] "GET /lc.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:39 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:40 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:40 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:41 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:41 +0100] "GET /ol.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:41 +0100] "GET /ot.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:41 +0100] "GET /past.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:42 +0100] "GET /pepe.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:42 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:42 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:43 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:43 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:43 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:44 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:44 +0100] "GET /wp-logiin.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:44 +0100] "GET /wp-mn.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:45 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:45 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:45 +0100] "GET /xl.php HTTP/1.1" 301 162 "-" "-" 162.159.110.122 - - [20/Nov/2025:16:10:46 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 172.64.215.12 - - [20/Nov/2025:16:34:07 +0100] "GET /new4.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:13 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:13 +0100] "GET /ava.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:14 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:17 +0100] "GET /pow.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:20 +0100] "GET /zuk.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:20 +0100] "GET /fss.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [20/Nov/2025:16:34:21 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:21 +0100] "GET /core.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:21 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:22 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:22 +0100] "GET /fox.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:22 +0100] "GET /wp-content/plugins/wpsearch/login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:22 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:23 +0100] "GET /sts.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [20/Nov/2025:16:34:23 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:23 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:24 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:24 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:24 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:24 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:25 +0100] "GET /akc.php?p= HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:25 +0100] "GET /app/webroot/filemanager.php?p= HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [20/Nov/2025:16:34:25 +0100] "GET /asasx.php?p= HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:26 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:26 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:26 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:27 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:27 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:27 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:28 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:28 +0100] "GET /dropdown.php?p= HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:28 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:32 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:32 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:32 +0100] "GET /makeasmtp.php?p= HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:32 +0100] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:35 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:35 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:35 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:36 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:36 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:37 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:38 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:38 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:38 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:38 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:39 +0100] "GET /wp-admin/includes HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:39 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:41 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:41 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:42 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:42 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:42 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:45 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:45 +0100] "GET /ALFA_DATA/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:46 +0100] "GET /aaa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:46 +0100] "GET /admin/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:47 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [20/Nov/2025:16:34:48 +0100] "GET /build.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:49 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:49 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:49 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:50 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:50 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:50 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:51 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:51 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:52 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:52 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:52 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:53 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:53 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:53 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:54 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:54 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:55 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:55 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [20/Nov/2025:16:34:55 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:56 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:56 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:57 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:57 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [20/Nov/2025:16:34:57 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:57 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:58 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:34:58 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:58 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:34:58 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:00 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:00 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:00 +0100] "GET /0.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:01 +0100] "GET /07.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:01 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:01 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:02 +0100] "GET /wp-sigunq.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:03 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:03 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:04 +0100] "GET /fw.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:04 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:05 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:05 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:05 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:06 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:07 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:07 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:08 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:08 +0100] "GET /wp-comments-post.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:09 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:09 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:10 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:10 +0100] "GET /plugins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:10 +0100] "GET /post.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:11 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:11 +0100] "GET /geju.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:12 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:12 +0100] "GET /hoot.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:12 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:13 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:13 +0100] "GET /mail.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:13 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:14 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:14 +0100] "GET /upfile.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:15 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:15 +0100] "GET /bypass.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:16 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:16 +0100] "GET /updates.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:17 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:17 +0100] "GET /ae.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:17 +0100] "GET /blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:18 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:19 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:19 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:19 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:19 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:20 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:20 +0100] "GET /9.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:20 +0100] "GET /admin-ajax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:21 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:21 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:21 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:21 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:22 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [20/Nov/2025:16:35:22 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [20/Nov/2025:16:35:25 +0100] "GET /form.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:25 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:25 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:25 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [20/Nov/2025:16:35:26 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [20/Nov/2025:16:51:47 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:48 +0100] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:49 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:49 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:49 +0100] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:49 +0100] "GET /wp-includes/SimplePie/network.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:50 +0100] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:50 +0100] "GET /widgets.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:50 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:51 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:51 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:51 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:52 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:52 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:53 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:53 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:53 +0100] "GET /abe.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:54 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:54 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:55 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:55 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:55 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:55 +0100] "GET /cloud.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:56 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:56 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:56 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:57 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:57 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:57 +0100] "GET /text.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:58 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:58 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:58 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:59 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:51:59 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:00 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:00 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:00 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:01 +0100] "GET /files/css_compare.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:01 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:02 +0100] "GET /uana.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:02 +0100] "GET /duck.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:02 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:02 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:03 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:03 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:03 +0100] "GET /siteheads.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:04 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:04 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:04 +0100] "GET /ioxi-rex4.php7 HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:04 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:05 +0100] "GET /wp-info.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:05 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:06 +0100] "GET /ws.php7 HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:06 +0100] "GET /rss.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:06 +0100] "GET /pekok.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:06 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:07 +0100] "GET /wp-aa.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:07 +0100] "GET /cart.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:07 +0100] "GET /categories.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:08 +0100] "GET /compare.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:08 +0100] "GET /refund.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:08 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:08 +0100] "GET /wishlist.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:09 +0100] "GET /results.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:09 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:09 +0100] "GET /222.php?p= HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:10 +0100] "GET /atom.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:10 +0100] "GET /case.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:10 +0100] "GET /docs.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:11 +0100] "GET /ios.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:11 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:11 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:12 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:12 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:12 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:12 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:13 +0100] "GET /f.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:13 +0100] "GET /max.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:14 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:14 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:14 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:15 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:15 +0100] "GET /vv.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:15 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:15 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:16 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:16 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:16 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:16 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:17 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:17 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:17 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:18 +0100] "GET /el.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:18 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:18 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:19 +0100] "GET /conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [20/Nov/2025:16:52:19 +0100] "GET /xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.174.209 - - [20/Nov/2025:17:40:13 +0100] "GET //code.jquery.com/jquery-latest.js HTTP/1.1" 301 162 "-" "wii libnup/1.0" 104.23.221.20 - - [20/Nov/2025:18:03:20 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.182.193 - - [20/Nov/2025:18:06:03 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.42.75 - - [20/Nov/2025:18:22:21 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 162.158.41.22 - - [20/Nov/2025:18:22:21 +0100] "GET /sitemap.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 104.23.223.110 - - [20/Nov/2025:22:47:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.223.13 - - [20/Nov/2025:22:57:04 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.95.106 - - [20/Nov/2025:23:19:55 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.150.137 - - [20/Nov/2025:23:35:16 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.242.219 - - [20/Nov/2025:23:35:49 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.88.111 - - [20/Nov/2025:23:37:55 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.70.115.209 - - [21/Nov/2025:00:31:14 +0100] "GET //connect.facebook.net/en_GB/sdk.js HTTP/1.1" 301 162 "-" "Opera/9.80 (X11; Linux i686; U; en) Presto/2.2.15 Version/10.10" 172.70.208.108 - - [21/Nov/2025:01:02:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.208.47 - - [21/Nov/2025:01:02:27 +0100] "GET /wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Firefox/117.0" 172.70.83.91 - - [21/Nov/2025:01:07:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.158.122.111 - - [21/Nov/2025:01:31:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Burst5000TitleFetcher/1.0" 172.71.195.107 - - [21/Nov/2025:02:06:56 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.195.46 - - [21/Nov/2025:02:06:56 +0100] "GET /details.php?post_id=1&v=Favorite HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.172.11 - - [21/Nov/2025:03:11:24 +0100] "GET / HTTP/1.1" 301 162 "-" "python-httpx/0.28.1" 172.71.124.49 - - [21/Nov/2025:03:17:36 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.70.254.150 - - [21/Nov/2025:03:37:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.31.134 - - [21/Nov/2025:07:32:58 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.174.249 - - [21/Nov/2025:08:06:00 +0100] "GET /new4.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.175.159 - - [21/Nov/2025:08:06:01 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.175.159 - - [21/Nov/2025:08:06:01 +0100] "GET /ava.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.175.159 - - [21/Nov/2025:08:06:03 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.175.159 - - [21/Nov/2025:08:06:03 +0100] "GET /pow.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.175.159 - - [21/Nov/2025:08:06:03 +0100] "GET /zuk.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.175.159 - - [21/Nov/2025:08:06:03 +0100] "GET /fss.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.175.159 - - [21/Nov/2025:08:06:03 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.175.159 - - [21/Nov/2025:08:06:04 +0100] "GET /core.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.175.159 - - [21/Nov/2025:08:06:07 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.175.159 - - [21/Nov/2025:08:06:07 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:09 +0100] "GET /fox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:09 +0100] "GET /wp-content/plugins/wpsearch/login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:10 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:10 +0100] "GET /sts.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:10 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:10 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:10 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:11 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:11 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:11 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:11 +0100] "GET /akc.php?p= HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:11 +0100] "GET /app/webroot/filemanager.php?p= HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:12 +0100] "GET /asasx.php?p= HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:13 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:13 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:14 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:15 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.174.249 - - [21/Nov/2025:08:06:15 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:15 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:15 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:15 +0100] "GET /dropdown.php?p= HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:16 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:16 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:17 +0100] "GET /item.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:17 +0100] "GET /makeasmtp.php?p= HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:17 +0100] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:18 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:18 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:18 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:19 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:19 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:19 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:20 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:20 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:20 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:22 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:22 +0100] "GET /wp-admin/includes HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:22 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:22 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:23 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:23 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:24 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:24 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:25 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:25 +0100] "GET /ALFA_DATA/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:26 +0100] "GET /aaa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:26 +0100] "GET /admin/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:27 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:27 +0100] "GET /build.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:27 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:27 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:28 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.174.249 - - [21/Nov/2025:08:06:28 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:28 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:28 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:28 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:29 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:29 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:29 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:29 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:29 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:30 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:30 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:31 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:31 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.174.249 - - [21/Nov/2025:08:06:31 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:31 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:31 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:32 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:32 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:32 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:33 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:33 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.174.249 - - [21/Nov/2025:08:06:34 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:34 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:34 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:35 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:35 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:36 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:36 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:37 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:37 +0100] "GET /07.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:37 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:37 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:37 +0100] "GET /wp-sigunq.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:38 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:38 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:38 +0100] "GET /fw.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:38 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:39 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:39 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:40 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:40 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:40 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:40 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:40 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.174.249 - - [21/Nov/2025:08:06:41 +0100] "GET /wp-comments-post.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:41 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:41 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:42 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:42 +0100] "GET /plugins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:43 +0100] "GET /post.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:43 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:43 +0100] "GET /geju.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:44 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:44 +0100] "GET /hoot.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:44 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:44 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:44 +0100] "GET /mail.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:45 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:48 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:48 +0100] "GET /upfile.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:49 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:49 +0100] "GET /bypass.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:49 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:49 +0100] "GET /updates.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:50 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:50 +0100] "GET /ae.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.174.249 - - [21/Nov/2025:08:06:50 +0100] "GET /blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:50 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:51 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:51 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:51 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:51 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:52 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:52 +0100] "GET /9.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:52 +0100] "GET /admin-ajax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:53 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:53 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:53 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:53 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:54 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.174.249 - - [21/Nov/2025:08:06:54 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:54 +0100] "GET /form.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.174.249 - - [21/Nov/2025:08:06:54 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:55 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:55 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.174.249 - - [21/Nov/2025:08:06:55 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.226.177 - - [21/Nov/2025:10:33:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.12.99 - - [21/Nov/2025:12:11:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 141.101.99.79 - - [21/Nov/2025:12:49:32 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.242.219 - - [21/Nov/2025:12:49:57 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.187.226 - - [21/Nov/2025:13:48:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 162.159.119.62 - - [21/Nov/2025:13:48:58 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 172.69.151.199 - - [21/Nov/2025:13:53:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.240.160 - - [21/Nov/2025:13:53:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.172.86 - - [21/Nov/2025:14:07:58 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.170.151 - - [21/Nov/2025:14:43:21 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.64.217.21 - - [21/Nov/2025:15:57:42 +0100] "GET / HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.69.214.14 - - [21/Nov/2025:16:11:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 172.71.172.86 - - [21/Nov/2025:16:13:47 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.110.69 - - [21/Nov/2025:16:13:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.254.150 - - [21/Nov/2025:18:13:35 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 104.23.211.195 - - [21/Nov/2025:18:24:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.130.114 - - [21/Nov/2025:21:21:41 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.182.192 - - [21/Nov/2025:22:39:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.209.47 - - [22/Nov/2025:01:49:04 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.209.30 - - [22/Nov/2025:01:49:06 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.30 - - [22/Nov/2025:01:49:06 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.209.30 - - [22/Nov/2025:01:49:06 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.30 - - [22/Nov/2025:01:49:06 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.209.30 - - [22/Nov/2025:01:49:07 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.30 - - [22/Nov/2025:01:49:07 +0100] "GET /ALFA_DATA/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.209.30 - - [22/Nov/2025:01:49:07 +0100] "GET /aaa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.30 - - [22/Nov/2025:01:49:08 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.30 - - [22/Nov/2025:01:49:09 +0100] "GET /admin/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:11 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:13 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.209.47 - - [22/Nov/2025:01:49:14 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:14 +0100] "GET /build.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:14 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:17 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:17 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:17 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:18 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:18 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:18 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:19 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:20 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:21 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:21 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:22 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:22 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:22 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:22 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:23 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:23 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:23 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:24 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:24 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:25 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:25 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:26 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:26 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:26 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:27 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:27 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:27 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.209.47 - - [22/Nov/2025:01:49:28 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:28 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:29 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:29 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:29 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:30 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:30 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.209.47 - - [22/Nov/2025:01:49:30 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:30 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:31 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.209.47 - - [22/Nov/2025:01:49:31 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:31 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:32 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:32 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:32 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:32 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:33 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:33 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:34 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:35 +0100] "GET /0.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:35 +0100] "GET /07.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:36 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:37 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:37 +0100] "GET /wp-sigunq.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:37 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.209.47 - - [22/Nov/2025:01:49:38 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:38 +0100] "GET /fw.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:38 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:38 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:39 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.209.47 - - [22/Nov/2025:01:49:39 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:40 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:40 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:41 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.209.47 - - [22/Nov/2025:01:49:41 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:42 +0100] "GET /wp-comments-post.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:43 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:43 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:43 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:43 +0100] "GET /plugins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:43 +0100] "GET /post.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:44 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:45 +0100] "GET /geju.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:45 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:46 +0100] "GET /hoot.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:47 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:47 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:48 +0100] "GET /mail.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:48 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:48 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:49 +0100] "GET /upfile.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:49 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:51 +0100] "GET /bypass.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:51 +0100] "GET /404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:51 +0100] "GET /updates.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:51 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:51 +0100] "GET /ae.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:52 +0100] "GET /blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:52 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:52 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:52 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:53 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:53 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:54 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:54 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:54 +0100] "GET /9.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:54 +0100] "GET /admin-ajax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:55 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:56 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:56 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:56 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:56 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.209.47 - - [22/Nov/2025:01:49:56 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:57 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:57 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:49:57 +0100] "GET /form.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:49:59 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:50:00 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:50:01 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.209.47 - - [22/Nov/2025:01:50:01 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:50:03 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.47 - - [22/Nov/2025:01:50:03 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.178.110 - - [22/Nov/2025:02:29:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.55.226 - - [22/Nov/2025:03:15:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.134.112 - - [22/Nov/2025:03:26:36 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.122.34 - - [22/Nov/2025:03:26:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.103.55 - - [22/Nov/2025:03:41:27 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.47.30 - - [22/Nov/2025:03:41:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.250.219 - - [22/Nov/2025:04:56:09 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.242.218 - - [22/Nov/2025:04:56:58 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.94.172 - - [22/Nov/2025:05:47:33 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.143.186 - - [22/Nov/2025:07:28:03 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.70.242.219 - - [22/Nov/2025:09:09:06 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 141.101.99.79 - - [22/Nov/2025:09:10:24 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.68.7.191 - - [22/Nov/2025:10:06:33 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.158.41.22 - - [22/Nov/2025:12:49:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.158.172.114 - - [22/Nov/2025:14:07:00 +0100] "GET / HTTP/1.1" 301 162 "-" "python-httpx/0.28.1" 172.70.254.151 - - [22/Nov/2025:15:21:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.190.43 - - [22/Nov/2025:15:45:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:48 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.134 - - [22/Nov/2025:20:40:49 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.134 - - [22/Nov/2025:20:40:49 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.170.134 - - [22/Nov/2025:20:40:49 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.170.134 - - [22/Nov/2025:20:40:50 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.134 - - [22/Nov/2025:20:40:50 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.134 - - [22/Nov/2025:20:40:50 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.134 - - [22/Nov/2025:20:40:50 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.134 - - [22/Nov/2025:20:40:51 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.134 - - [22/Nov/2025:20:40:51 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.134 - - [22/Nov/2025:20:40:52 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.134 - - [22/Nov/2025:20:40:52 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.134 - - [22/Nov/2025:20:40:52 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.134 - - [22/Nov/2025:20:40:52 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:52 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:53 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:53 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.170.151 - - [22/Nov/2025:20:40:53 +0100] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:53 +0100] "GET /.well-known/wso112233.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:53 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:53 +0100] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:54 +0100] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:54 +0100] "GET /.well-known/pkivalidation/wso112233.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:54 +0100] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:55 +0100] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:56 +0100] "GET /wp-content/wso112233.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:57 +0100] "GET /wp-includes/wso112233.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:57 +0100] "GET /wp-admin/wso112233.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:57 +0100] "GET /wp-content/themes/wso112233.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:57 +0100] "GET /.well-known/shell20211028.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:58 +0100] "GET /shell20211028.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:58 +0100] "GET /.well-knownold/shell20211028.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:58 +0100] "GET /.well-known/acme-challenge/shell20211028.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:58 +0100] "GET /.well-known/pkivalidation/shell20211028.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:58 +0100] "GET /wp-content/plugins/shell20211028.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:58 +0100] "GET /wp-content/uploads/shell20211028.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:59 +0100] "GET /wp-content/shell20211028.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:59 +0100] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:59 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:59 +0100] "GET /wp-content/themes/shell20211028.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:40:59 +0100] "GET /.well-known/bala.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:40:59 +0100] "GET /bala.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:00 +0100] "GET /.well-knownold/bala.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:00 +0100] "GET /.well-known/acme-challenge/bala.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:00 +0100] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:00 +0100] "GET /wp-content/plugins/bala.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:01 +0100] "GET /wp-content/uploads/bala.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:01 +0100] "GET /wp-content/bala.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:01 +0100] "GET /wp-includes/bala.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:01 +0100] "GET /wp-admin/bala.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:02 +0100] "GET /wp-content/themes/bala.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:02 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:02 +0100] "GET /wp-content/dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:02 +0100] "GET /wp-includes/dropdown.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:02 +0100] "GET /wp-admin/dropdown.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.170.151 - - [22/Nov/2025:20:41:03 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:03 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:03 +0100] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.170.151 - - [22/Nov/2025:20:41:03 +0100] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:03 +0100] "GET /wp-p.php7 HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:04 +0100] "GET /wp-admin/repeater.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.170.151 - - [22/Nov/2025:20:41:04 +0100] "GET /wp-includes/repeater.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:04 +0100] "GET /wp-content/repeater.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:04 +0100] "GET /wsoyanz.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:04 +0100] "GET /yanz.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:05 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:05 +0100] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:05 +0100] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:06 +0100] "GET /cache-compat.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:06 +0100] "GET /ajax-actions.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.170.151 - - [22/Nov/2025:20:41:06 +0100] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:06 +0100] "GET /wp-consar.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:06 +0100] "GET /repeater.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:07 +0100] "GET /admin-post.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:07 +0100] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:07 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:07 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:07 +0100] "GET /about.php7 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:07 +0100] "GET /alfanew.php7 HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:08 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:08 +0100] "GET /ebs.php7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:08 +0100] "GET /ws.php7 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:08 +0100] "GET /alfanew2.php7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:09 +0100] "GET /alfa-rex2.php7 HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.170.151 - - [22/Nov/2025:20:41:09 +0100] "GET /ioxi-rex4.php7 HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.170.151 - - [22/Nov/2025:20:41:09 +0100] "GET /wp-content/plugins/seoo/alfa-ioxi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.170.151 - - [22/Nov/2025:20:41:09 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.193 - - [22/Nov/2025:20:44:48 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.223.111 - - [22/Nov/2025:20:47:40 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.221.21 - - [22/Nov/2025:22:40:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.223.110 - - [23/Nov/2025:01:37:01 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 172.68.23.67 - - [23/Nov/2025:01:44:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.70.240.205 - - [23/Nov/2025:07:39:54 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.69.150.137 - - [23/Nov/2025:07:39:59 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:25 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.127.77 - - [23/Nov/2025:08:18:26 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.127.77 - - [23/Nov/2025:08:18:26 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.127.77 - - [23/Nov/2025:08:18:26 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.127.77 - - [23/Nov/2025:08:18:27 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.127.77 - - [23/Nov/2025:08:18:27 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.127.77 - - [23/Nov/2025:08:18:27 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.127.77 - - [23/Nov/2025:08:18:27 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.127.77 - - [23/Nov/2025:08:18:28 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.127.77 - - [23/Nov/2025:08:18:28 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.127.77 - - [23/Nov/2025:08:18:29 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:29 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:29 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:29 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:29 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:30 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:30 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:31 +0100] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:31 +0100] "GET /.well-known/wso112233.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:31 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:31 +0100] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:31 +0100] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:32 +0100] "GET /.well-known/pkivalidation/wso112233.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:32 +0100] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:33 +0100] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:33 +0100] "GET /wp-content/wso112233.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:33 +0100] "GET /wp-includes/wso112233.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:33 +0100] "GET /wp-admin/wso112233.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:34 +0100] "GET /wp-content/themes/wso112233.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:34 +0100] "GET /.well-known/shell20211028.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:34 +0100] "GET /shell20211028.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:34 +0100] "GET /.well-knownold/shell20211028.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:34 +0100] "GET /.well-known/acme-challenge/shell20211028.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:35 +0100] "GET /.well-known/pkivalidation/shell20211028.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:35 +0100] "GET /wp-content/plugins/shell20211028.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:35 +0100] "GET /wp-content/uploads/shell20211028.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:35 +0100] "GET /wp-content/shell20211028.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:35 +0100] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:36 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:36 +0100] "GET /wp-content/themes/shell20211028.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:36 +0100] "GET /.well-known/bala.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:37 +0100] "GET /bala.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:37 +0100] "GET /.well-knownold/bala.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:37 +0100] "GET /.well-known/acme-challenge/bala.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:37 +0100] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:38 +0100] "GET /wp-content/plugins/bala.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:38 +0100] "GET /wp-content/uploads/bala.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:38 +0100] "GET /wp-content/bala.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:38 +0100] "GET /wp-includes/bala.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:39 +0100] "GET /wp-admin/bala.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:39 +0100] "GET /wp-content/themes/bala.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:39 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:39 +0100] "GET /wp-content/dropdown.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:40 +0100] "GET /wp-includes/dropdown.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:40 +0100] "GET /wp-admin/dropdown.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:40 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:40 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:41 +0100] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:41 +0100] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:41 +0100] "GET /wp-p.php7 HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:41 +0100] "GET /wp-admin/repeater.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:41 +0100] "GET /wp-includes/repeater.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:42 +0100] "GET /wp-content/repeater.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:42 +0100] "GET /wsoyanz.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:42 +0100] "GET /yanz.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:42 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:42 +0100] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:43 +0100] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:43 +0100] "GET /cache-compat.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:43 +0100] "GET /ajax-actions.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:43 +0100] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:43 +0100] "GET /wp-consar.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:44 +0100] "GET /repeater.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:44 +0100] "GET /admin-post.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:44 +0100] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:44 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:44 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:45 +0100] "GET /about.php7 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:45 +0100] "GET /alfanew.php7 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:45 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.126.202 - - [23/Nov/2025:08:18:45 +0100] "GET /ebs.php7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.126.202 - - [23/Nov/2025:08:18:45 +0100] "GET /ws.php7 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.126.202 - - [23/Nov/2025:08:18:46 +0100] "GET /alfanew2.php7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.58.101 - - [23/Nov/2025:08:18:46 +0100] "GET /alfa-rex2.php7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.58.101 - - [23/Nov/2025:08:18:46 +0100] "GET /ioxi-rex4.php7 HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.58.101 - - [23/Nov/2025:08:18:46 +0100] "GET /wp-content/plugins/seoo/alfa-ioxi.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.58.101 - - [23/Nov/2025:08:18:47 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [23/Nov/2025:08:29:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.68.210.160 - - [23/Nov/2025:09:14:14 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:19 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:19 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:20 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:20 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:20 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:21 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:21 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:22 +0100] "GET /wp-includes/0.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:22 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:23 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:23 +0100] "GET /wp-includes/cs.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:23 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:24 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:24 +0100] "GET /sko.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:25 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:25 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:26 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:26 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:26 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:27 +0100] "GET /Cok.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:27 +0100] "GET /hob.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:28 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:28 +0100] "GET /fh26.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:28 +0100] "GET /ot.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:29 +0100] "GET /kal.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:29 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:30 +0100] "GET /lx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:30 +0100] "GET /w1w.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:30 +0100] "GET /cafe.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:31 +0100] "GET /ww2.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:31 +0100] "GET /ww3.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:32 +0100] "GET /ww4.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:32 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:32 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:33 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:33 +0100] "GET /max.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:34 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:34 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:35 +0100] "GET /ALFA_DATA/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:35 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:36 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:36 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:37 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:37 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:37 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:38 +0100] "GET /13k.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:38 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:39 +0100] "GET /yellow.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:39 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:40 +0100] "GET /fw.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:40 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:40 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:41 +0100] "GET /termps.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:41 +0100] "GET /co.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:41 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:42 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:42 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:43 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:43 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:43 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:44 +0100] "GET /wp-content/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:44 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:44 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:45 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:45 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:46 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:46 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:47 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:47 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:48 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:48 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:49 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:49 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:50 +0100] "GET /moon.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:50 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:50 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:51 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:51 +0100] "GET /fm.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:52 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:52 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:52 +0100] "GET /alpa.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:53 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:53 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:53 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:54 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:54 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:55 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:55 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:56 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:56 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:57 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:57 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:58 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:58 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:58 +0100] "GET /article.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:59 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:14:59 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:00 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:00 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:00 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:01 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:01 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:01 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:02 +0100] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:02 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:02 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:03 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:03 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:04 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:04 +0100] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:04 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:05 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:05 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:05 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:06 +0100] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:06 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:07 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:07 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:08 +0100] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:08 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:08 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:09 +0100] "GET /qqq.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:09 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:09 +0100] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:10 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:10 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:11 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:11 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:11 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:12 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:12 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:12 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:13 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:13 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:13 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:14 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:14 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:14 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:15 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:15 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:16 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:16 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:17 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:18 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:18 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:19 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:19 +0100] "GET /bge.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:19 +0100] "GET /ifm.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:20 +0100] "GET /ww5.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:20 +0100] "GET /thxt.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:21 +0100] "GET /kairolin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [23/Nov/2025:09:15:21 +0100] "GET /siln.php HTTP/1.1" 301 162 "-" "-" 104.23.248.183 - - [23/Nov/2025:11:41:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.158.39.198 - - [23/Nov/2025:11:55:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:01 +0100] "GET /neshe HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:02 +0100] "GET /siln.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:02 +0100] "GET /xpow0b.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:02 +0100] "GET /xpobv.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:03 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:03 +0100] "GET /xmailer.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:03 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:04 +0100] "GET /wp-settings.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:04 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:05 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:05 +0100] "GET /testo.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:06 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:06 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:07 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:07 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:08 +0100] "GET /saxzw9t.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:09 +0100] "GET /saxzgf5.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:09 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:10 +0100] "GET /psh.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:10 +0100] "GET /revision.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:10 +0100] "GET /product.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:11 +0100] "GET /klwc.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:11 +0100] "GET /klbnm.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:12 +0100] "GET /bkxzo.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:12 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:12 +0100] "GET /d12.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:13 +0100] "GET /ad.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:13 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:13 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:14 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:14 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:15 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:16 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:16 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:16 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:17 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:17 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:18 +0100] "GET /new2.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:19 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:19 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:19 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:20 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:20 +0100] "GET /indo.php/qa.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:20 +0100] "GET /wp-content/plugins/edaewni/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:21 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:21 +0100] "GET /well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:22 +0100] "GET /wxo.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:22 +0100] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:23 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:23 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:23 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:24 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:24 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:25 +0100] "GET /yy.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:25 +0100] "GET /well-known/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:25 +0100] "GET /well-known/acme-challenge/LA.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:26 +0100] "GET /6.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:26 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:26 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:27 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:27 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:28 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:28 +0100] "GET /r.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:28 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:29 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:29 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:29 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:30 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:31 +0100] "GET /qing.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [23/Nov/2025:11:55:31 +0100] "GET /w.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.146.75 - - [23/Nov/2025:12:54:50 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 108.162.245.152 - - [23/Nov/2025:12:54:50 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.164.111 - - [23/Nov/2025:16:39:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 172.71.148.183 - - [23/Nov/2025:16:39:20 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 172.64.213.121 - - [23/Nov/2025:16:51:55 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:56 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:56 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:56 +0100] "GET /golden.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:57 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:57 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:57 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:57 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:58 +0100] "GET /ffile.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:58 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:58 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:58 +0100] "GET /adminer.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:59 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:59 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:59 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:51:59 +0100] "GET /bless2.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:00 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:00 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:00 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:00 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:01 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:01 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:01 +0100] "GET /dejavu.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:01 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:02 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:02 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:02 +0100] "GET /past.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:02 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:03 +0100] "GET /ol.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:03 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:03 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:03 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:04 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:04 +0100] "GET /ot.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:04 +0100] "GET /lc.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:05 +0100] "GET /cool.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:05 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:05 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:05 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:06 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:06 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:06 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:06 +0100] "GET /astab.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:07 +0100] "GET /xl.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:07 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:07 +0100] "GET /pepe.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:07 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:08 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:08 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:08 +0100] "GET /faq.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:08 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:09 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:09 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:09 +0100] "GET /wp-mn.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:09 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 172.64.213.121 - - [23/Nov/2025:16:52:10 +0100] "GET /wp-logiin.php HTTP/1.1" 301 162 "-" "-" 172.68.245.187 - - [23/Nov/2025:17:05:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.71.24.174 - - [23/Nov/2025:19:38:31 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:32 +0100] "GET /atex1.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:33 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:33 +0100] "GET /oitava.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:33 +0100] "GET /poliomyelopathy.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:33 +0100] "GET /clss.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:34 +0100] "GET /yuk.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:34 +0100] "GET /nof.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:34 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:34 +0100] "GET /qaez.php56 HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:35 +0100] "GET /byp8.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:35 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:35 +0100] "GET /cyanamids.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:35 +0100] "GET /xl6.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:36 +0100] "GET /attaining.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:36 +0100] "GET /wp-home.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:36 +0100] "GET /wp-securitiy.php HTTP/1.1" 301 162 "-" "-" 172.71.24.169 - - [23/Nov/2025:19:38:36 +0100] "GET /2co_ipn.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:37 +0100] "GET /glucosidase.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:37 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:37 +0100] "GET /boyfile.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:37 +0100] "GET /fm.php?= HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:38 +0100] "GET /raw.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:38 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:38 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:38 +0100] "GET /modernize.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:39 +0100] "GET /ghreshttryu.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:39 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:39 +0100] "GET /byp7.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:39 +0100] "GET /unwattled.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:40 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:40 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:40 +0100] "GET /twohandedness.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:40 +0100] "GET /acholuria.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:41 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:41 +0100] "GET /2co_ipn_sub.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:41 +0100] "GET /bunnies.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:41 +0100] "GET /d12.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:42 +0100] "GET /diesinker.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:42 +0100] "GET /phrensying.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:42 +0100] "GET /wp-ac.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:42 +0100] "GET /undigitated.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:43 +0100] "GET /unbalanceable.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:43 +0100] "GET /unbefittingly.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:43 +0100] "GET /wp-blog-front.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:43 +0100] "GET /bn.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:44 +0100] "GET /lanbai.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:44 +0100] "GET /speculative.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:44 +0100] "GET /starry.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:44 +0100] "GET /unsafer.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:45 +0100] "GET /pyrometry.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:45 +0100] "GET /frenchwomen.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:45 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:45 +0100] "GET /microspore.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:46 +0100] "GET /dinah.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:46 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:46 +0100] "GET /zc-729.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:46 +0100] "GET /bo.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:47 +0100] "GET /Contrller.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:47 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:47 +0100] "GET /parturiency.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:47 +0100] "GET /disquiet.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:48 +0100] "GET /wp-advaced.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:48 +0100] "GET /wpc2.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:48 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:48 +0100] "GET /obfuscous.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:49 +0100] "GET /domains.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:49 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:49 +0100] "GET /aporrhiegma.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:49 +0100] "GET /disengaging.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:50 +0100] "GET /tithings.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:50 +0100] "GET /muscovadite.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:50 +0100] "GET /hans.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:50 +0100] "GET /coenoecic.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:51 +0100] "GET /xtt.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:51 +0100] "GET /edd.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:51 +0100] "GET /prototheria.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:51 +0100] "GET /washland.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:52 +0100] "GET /fishmen.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:52 +0100] "GET /nonesoterically.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:52 +0100] "GET /unprecipitously.php HTTP/1.1" 301 162 "-" "-" 172.71.24.174 - - [23/Nov/2025:19:38:52 +0100] "GET /krypton.php HTTP/1.1" 301 162 "-" "-" 172.70.126.202 - - [23/Nov/2025:21:03:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.71.127.96 - - [23/Nov/2025:21:12:59 +0100] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.23.0" 172.70.55.226 - - [23/Nov/2025:21:14:32 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:12 +0100] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:13 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:14 +0100] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:14 +0100] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:14 +0100] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:15 +0100] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:15 +0100] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:16 +0100] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:16 +0100] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.141.35 - - [23/Nov/2025:21:33:16 +0100] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:25 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.31 - - [23/Nov/2025:22:26:26 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.31 - - [23/Nov/2025:22:26:26 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.100.31 - - [23/Nov/2025:22:26:26 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.31 - - [23/Nov/2025:22:26:27 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.31 - - [23/Nov/2025:22:26:27 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:27 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:27 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:28 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:28 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:30 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:30 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:30 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:30 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:31 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:31 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:31 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:32 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:32 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:33 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:33 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:34 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:34 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:34 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:34 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:34 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:35 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:35 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:35 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:36 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:36 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:36 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:36 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:37 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:37 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:37 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:37 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:37 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:37 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.100.213 - - [23/Nov/2025:22:26:38 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:38 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:39 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:39 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:39 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:40 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:40 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:40 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:40 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:40 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.100.213 - - [23/Nov/2025:22:26:41 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:41 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:41 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:42 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:42 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:42 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:42 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.100.213 - - [23/Nov/2025:22:26:43 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:43 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:43 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:43 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:43 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:44 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:44 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:44 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:45 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:45 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:45 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:45 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:46 +0100] "GET /system/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:46 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:46 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:46 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.100.213 - - [23/Nov/2025:22:26:46 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:47 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:47 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:47 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:48 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:49 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:49 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:49 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:49 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:49 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:50 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:50 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:50 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:51 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:51 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:51 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:51 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:52 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:52 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:52 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:52 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:52 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.100.213 - - [23/Nov/2025:22:26:53 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:53 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:53 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:54 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:54 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:54 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:54 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:55 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:55 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:55 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:55 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:55 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:55 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:56 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:56 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:56 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.100.213 - - [23/Nov/2025:22:26:56 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.100.213 - - [23/Nov/2025:22:26:56 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:57 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:57 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:57 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:57 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:58 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:58 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.100.213 - - [23/Nov/2025:22:26:58 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:59 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:59 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:59 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.100.213 - - [23/Nov/2025:22:26:59 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [23/Nov/2025:22:49:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.99.50 - - [24/Nov/2025:00:28:26 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 2.2; en-us; Nexus One Build/FRF91) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 172.68.229.15 - - [24/Nov/2025:01:13:58 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.69.224.21 - - [24/Nov/2025:01:13:59 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.187.227 - - [24/Nov/2025:02:36:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 162.159.119.62 - - [24/Nov/2025:02:36:16 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.68.175.31 - - [24/Nov/2025:05:16:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FSL 7.0.6.01001)" 172.71.166.32 - - [24/Nov/2025:06:04:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [24/Nov/2025:06:13:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.182.192 - - [24/Nov/2025:06:25:18 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.68.12.98 - - [24/Nov/2025:08:07:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 104.23.175.111 - - [24/Nov/2025:08:11:56 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.70.134.220 - - [24/Nov/2025:10:00:34 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:36 +0100] "GET /shoha.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:36 +0100] "GET /yyy.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:37 +0100] "GET /ooj.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:37 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:37 +0100] "GET /x3.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:37 +0100] "GET /hzz.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:37 +0100] "GET /dom.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:38 +0100] "GET /dds.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:38 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:38 +0100] "GET /past.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:38 +0100] "GET /class-db.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:39 +0100] "GET /bq.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:39 +0100] "GET /tro.php HTTP/1.1" 301 162 "-" "-" 172.70.134.122 - - [24/Nov/2025:10:00:39 +0100] "GET /lov.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:39 +0100] "GET /wsz.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:40 +0100] "GET /73106.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:40 +0100] "GET /nas.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:40 +0100] "GET /acp.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:40 +0100] "GET /aol7.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:41 +0100] "GET /wui.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:41 +0100] "GET /wp-admin/new2.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:41 +0100] "GET /poj.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:41 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:42 +0100] "GET /zoro.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:42 +0100] "GET /ker.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:42 +0100] "GET /aaa.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:42 +0100] "GET /efa4f.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:42 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:43 +0100] "GET /dop.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:43 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:43 +0100] "GET /sec.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:44 +0100] "GET /set.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:44 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:44 +0100] "GET /awh77.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:45 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:45 +0100] "GET /hey.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:45 +0100] "GET /ed35f.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:45 +0100] "GET /reyha.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:46 +0100] "GET /lok.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:46 +0100] "GET /hgm.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:46 +0100] "GET /nax.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:47 +0100] "GET /xrp.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:47 +0100] "GET /bypltspd.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:48 +0100] "GET /nc.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:48 +0100] "GET /hob.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:48 +0100] "GET /fs.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:49 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:49 +0100] "GET /sow.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:49 +0100] "GET /xzs.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:49 +0100] "GET /ppp.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:50 +0100] "GET /kdrex.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:50 +0100] "GET /kal.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:50 +0100] "GET /gul.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:50 +0100] "GET /zil.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:50 +0100] "GET /nope.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:51 +0100] "GET /show/asa.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:51 +0100] "GET /nae.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:51 +0100] "GET /tua.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:52 +0100] "GET /exhitrgp.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:52 +0100] "GET /4ff11.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:52 +0100] "GET /nbr.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:52 +0100] "GET /o2.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:52 +0100] "GET /kla.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:53 +0100] "GET /1254.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:53 +0100] "GET /loi.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:54 +0100] "GET /jju.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:54 +0100] "GET /zcxb.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:54 +0100] "GET /moo.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:54 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:54 +0100] "GET /co.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:55 +0100] "GET /suy.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:55 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:55 +0100] "GET /testas.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:55 +0100] "GET /tech5pr.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:56 +0100] "GET /ryuk.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:56 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:56 +0100] "GET /6erg.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:56 +0100] "GET /sty.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:57 +0100] "GET /89.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:57 +0100] "GET /n3.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:57 +0100] "GET /zeal.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:57 +0100] "GET /sko.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:58 +0100] "GET /berm.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:58 +0100] "GET /wan.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:58 +0100] "GET /has.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:59 +0100] "GET /ma1.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:59 +0100] "GET /wpls.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:00:59 +0100] "GET /h8h9.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:00 +0100] "GET /wp-cliner.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:00 +0100] "GET /racs3.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:00 +0100] "GET /2index.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:00 +0100] "GET /rsnu.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:01 +0100] "GET /mtvcrew.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:01 +0100] "GET /agdew.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:01 +0100] "GET /Eva.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:02 +0100] "GET /vxrl.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:02 +0100] "GET /dox.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:02 +0100] "GET /giclass.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:02 +0100] "GET /vip.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:03 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:03 +0100] "GET /wp-xm.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:03 +0100] "GET /wpc1.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:04 +0100] "GET /33.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:04 +0100] "GET /xml.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:05 +0100] "GET /7f8c8.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:06 +0100] "GET /wle.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:07 +0100] "GET /144.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:07 +0100] "GET /tarc.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:07 +0100] "GET /mo.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:07 +0100] "GET /xtp.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:07 +0100] "GET /ad24f.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:08 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:08 +0100] "GET /orm.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:08 +0100] "GET /.an5.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:08 +0100] "GET /waff.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:09 +0100] "GET /yep.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:09 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:09 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:09 +0100] "GET /hum.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:10 +0100] "GET /law.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:10 +0100] "GET /xxx.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:10 +0100] "GET /card.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:10 +0100] "GET /des.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:11 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:11 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:12 +0100] "GET /1a.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:12 +0100] "GET /zasd.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:12 +0100] "GET /skk.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:13 +0100] "GET /haf.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:13 +0100] "GET /admi.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:13 +0100] "GET /gib.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:13 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:13 +0100] "GET /skj.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:14 +0100] "GET /155.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:14 +0100] "GET /shorw.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:15 +0100] "GET /c451f.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:15 +0100] "GET /public/new2.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:15 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:16 +0100] "GET /pes.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:16 +0100] "GET /eru.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:16 +0100] "GET /twso.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:16 +0100] "GET /ink.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:16 +0100] "GET /z58.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:17 +0100] "GET /led.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:17 +0100] "GET /klwc.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:17 +0100] "GET /fresh3.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:17 +0100] "GET /ula.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:18 +0100] "GET /thoms.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:18 +0100] "GET /wolv2.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:18 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:18 +0100] "GET /wto.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:19 +0100] "GET /G6.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:19 +0100] "GET /z57.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:19 +0100] "GET /JPG.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:19 +0100] "GET /09fa6.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:19 +0100] "GET /file30.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:20 +0100] "GET /zuk.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:20 +0100] "GET /n1.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:20 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:21 +0100] "GET /nok.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:21 +0100] "GET /xc.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:21 +0100] "GET /ggfi.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:21 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:21 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:22 +0100] "GET /tsconfig.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:22 +0100] "GET /rk2.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:22 +0100] "GET /pt.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:22 +0100] "GET /1index.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:23 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:23 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:23 +0100] "GET /mango.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:23 +0100] "GET /singlex.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:23 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:24 +0100] "GET /pepe.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:24 +0100] "GET /zcrtg.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:24 +0100] "GET /BbiNip.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:25 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:25 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:25 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:25 +0100] "GET /class-wp-more.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:26 +0100] "GET /20ojy.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:26 +0100] "GET /5drd24.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:26 +0100] "GET /js.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:26 +0100] "GET /wp-hayato.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:26 +0100] "GET /Hd.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:27 +0100] "GET /layout.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:27 +0100] "GET /colour.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:27 +0100] "GET /soYgFVi.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:28 +0100] "GET /kn18l3.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:28 +0100] "GET /pwnd.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:28 +0100] "GET /getid3s.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:28 +0100] "GET /Auth.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:29 +0100] "GET /wp-kaori.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:29 +0100] "GET /white.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:29 +0100] "GET /fw.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:30 +0100] "GET /wp-class-db.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:30 +0100] "GET /14.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:30 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:30 +0100] "GET /end.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:30 +0100] "GET /sts.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:31 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:31 +0100] "GET /about.php7 HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:31 +0100] "GET /alfa-rex.php8 HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:31 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:32 +0100] "GET /uploxe.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:32 +0100] "GET /ropyx.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:32 +0100] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:32 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:33 +0100] "GET /ae.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:33 +0100] "GET /cs.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:33 +0100] "GET /ahda.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:34 +0100] "GET /gool.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:34 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:34 +0100] "GET /error_log.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:34 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:35 +0100] "GET /oxvrws.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:35 +0100] "GET /1wx.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:35 +0100] "GET /pagea.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:35 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:35 +0100] "GET /lzmelu.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:36 +0100] "GET /xpas2.php HTTP/1.1" 301 162 "-" "-" 172.70.134.220 - - [24/Nov/2025:10:01:36 +0100] "GET /sss.php HTTP/1.1" 301 162 "-" "-" 172.70.94.172 - - [24/Nov/2025:11:06:20 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.6.151 - - [24/Nov/2025:12:28:37 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [24/Nov/2025:12:28:38 +0100] "GET /acxx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [24/Nov/2025:12:28:39 +0100] "GET /dev1s.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [24/Nov/2025:12:28:39 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [24/Nov/2025:12:28:40 +0100] "GET /c4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [24/Nov/2025:12:28:40 +0100] "GET /wsx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [24/Nov/2025:12:28:41 +0100] "GET /b4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:41 +0100] "GET /xenium4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:41 +0100] "GET /xpw.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:42 +0100] "GET /ww2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:42 +0100] "GET /ww3.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:43 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:43 +0100] "GET /d2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:43 +0100] "GET /snus.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:44 +0100] "GET /011i.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:44 +0100] "GET /disaos.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:44 +0100] "GET /gdn.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:45 +0100] "GET /ww4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:45 +0100] "GET /xc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:46 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:46 +0100] "GET /nx1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:46 +0100] "GET /ii.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:47 +0100] "GET /kr.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:47 +0100] "GET /18299.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:47 +0100] "GET /3.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:48 +0100] "GET /chati.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:48 +0100] "GET /content-over.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:48 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:49 +0100] "GET /naxc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:49 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [24/Nov/2025:12:28:49 +0100] "GET /size.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:50 +0100] "GET /rsjlrria.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:50 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:51 +0100] "GET /gec.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:51 +0100] "GET /update/gec.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:51 +0100] "GET /nfu.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:52 +0100] "GET /update/nfu.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:52 +0100] "GET /xl8.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:53 +0100] "GET /xl6.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:53 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:53 +0100] "GET /zc-706.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:54 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [24/Nov/2025:12:28:54 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:54 +0100] "GET /.well-known/as.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:55 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:55 +0100] "GET /e56.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:56 +0100] "GET /wp-x.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:56 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:56 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:57 +0100] "GET /20.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:57 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:58 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:58 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:58 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:59 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:28:59 +0100] "GET /4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:00 +0100] "GET /X7x.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:00 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:01 +0100] "GET /r.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:01 +0100] "GET /v4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:01 +0100] "GET /wp-22.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:02 +0100] "GET /makeasmtp.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:02 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:03 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:03 +0100] "GET /t.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:03 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:04 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:04 +0100] "GET /6.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:05 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:05 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:06 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:06 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:06 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:07 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:07 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:08 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:08 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:09 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:09 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:09 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:10 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:11 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:11 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:12 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:12 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:12 +0100] "GET /inputs.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:13 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:13 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:14 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:14 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:14 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:15 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:15 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:15 +0100] "GET /marijuana.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:16 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:16 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:17 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:17 +0100] "GET /1.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:18 +0100] "GET /marijuana.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:18 +0100] "GET /about/function.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:18 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:19 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:19 +0100] "GET /chosen.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:19 +0100] "GET /wp-cron.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:20 +0100] "GET /yanz.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:20 +0100] "GET /config.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:21 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:21 +0100] "GET /wp-2019.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:21 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:22 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:22 +0100] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:22 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:23 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:23 +0100] "GET /mail.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:23 +0100] "GET /wp-includes/system_log.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:24 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:24 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:25 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:25 +0100] "GET /wp-content/themes/wp-pridmag/init.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:25 +0100] "GET /plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:26 +0100] "GET /wp-configs.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:28 +0100] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:28 +0100] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:28 +0100] "GET /wp-includes/rest-api/fields/index.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:29 +0100] "GET /index/fucku.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:29 +0100] "GET /upload/wp-info.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:30 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [24/Nov/2025:12:29:30 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.224.21 - - [24/Nov/2025:15:40:13 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.172.20 - - [24/Nov/2025:15:42:20 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.68.12.98 - - [24/Nov/2025:17:50:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 162.158.178.20 - - [24/Nov/2025:21:44:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.221.21 - - [24/Nov/2025:22:40:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.175.157 - - [25/Nov/2025:01:29:25 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 104.23.223.111 - - [25/Nov/2025:04:05:49 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.217.47 - - [25/Nov/2025:04:07:24 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.22.1.89 - - [25/Nov/2025:06:50:27 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.69.71.140 - - [25/Nov/2025:06:50:28 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.71.103.56 - - [25/Nov/2025:07:03:53 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.103.115 - - [25/Nov/2025:07:03:53 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.87.62 - - [25/Nov/2025:07:03:53 +0100] "GET /.well-known/security.txt HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.151.199 - - [25/Nov/2025:07:03:53 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.172.87 - - [25/Nov/2025:07:03:53 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.46.94 - - [25/Nov/2025:07:03:53 +0100] "GET / HTTP/1.1" 301 162 "-" "DENIC-Crawler/42 (https://www.denic.de/crawler)" 104.23.170.72 - - [25/Nov/2025:07:03:53 +0100] "GET / HTTP/1.1" 301 162 "-" "DENIC-Crawler/42 (https://www.denic.de/crawler)" 172.70.247.95 - - [25/Nov/2025:07:03:54 +0100] "GET / HTTP/1.1" 301 162 "-" "DENIC-Crawler/42 (https://www.denic.de/crawler)" 172.71.172.52 - - [25/Nov/2025:07:03:54 +0100] "GET / HTTP/1.1" 301 162 "-" "DENIC-Crawler/42 (https://www.denic.de/crawler)" 108.162.237.172 - - [25/Nov/2025:07:25:50 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.71.22.116 - - [25/Nov/2025:07:25:50 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 162.158.183.69 - - [25/Nov/2025:09:19:23 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 104.23.223.110 - - [25/Nov/2025:09:19:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 172.70.94.173 - - [25/Nov/2025:09:21:06 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.221.53 - - [25/Nov/2025:10:14:43 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A5370a Safari/604.1" 162.158.102.254 - - [25/Nov/2025:10:14:43 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version 6.0.2 Safari/534.59.10" 104.23.217.153 - - [25/Nov/2025:10:14:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_2_5 like Mac OS X) AppleWebKit/604.5.6 (KHTML, like Gecko) Version/11.0 Mobile/15D5057a Safari/604.1" 162.158.172.238 - - [25/Nov/2025:10:14:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET4.0C; .NET4.0E)" 172.64.198.196 - - [25/Nov/2025:10:14:44 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36 OPR/46.0.2597.26" 162.158.103.84 - - [25/Nov/2025:10:14:44 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" 104.23.217.46 - - [25/Nov/2025:10:14:45 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0; InfoPath.3)" 162.158.172.238 - - [25/Nov/2025:10:14:45 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 162.158.103.84 - - [25/Nov/2025:10:14:46 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 7.0; Mobile; rv:51.0) Gecko/51.0 Firefox/51.0" 172.64.200.182 - - [25/Nov/2025:10:14:48 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.5.2171.95 Safari/537.36" 172.70.160.250 - - [25/Nov/2025:11:55:54 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.160.251 - - [25/Nov/2025:11:57:27 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.100.214 - - [25/Nov/2025:12:02:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.70.126.44 - - [25/Nov/2025:12:03:12 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.34.146 - - [25/Nov/2025:14:20:45 +0100] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" 172.68.245.186 - - [25/Nov/2025:14:20:47 +0100] "GET /.aws/credentials HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 172.71.194.123 - - [25/Nov/2025:14:20:47 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.191.73 - - [25/Nov/2025:14:20:47 +0100] "GET /.svn/wc.db HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.203.90 - - [25/Nov/2025:14:55:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 162.159.119.63 - - [25/Nov/2025:14:55:00 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 172.71.194.122 - - [25/Nov/2025:15:56:08 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:09 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:09 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:09 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.195.22 - - [25/Nov/2025:15:56:10 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:10 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:11 +0100] "GET /ALFA_DATA/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.195.22 - - [25/Nov/2025:15:56:11 +0100] "GET /aaa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:11 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:12 +0100] "GET /admin/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.195.22 - - [25/Nov/2025:15:56:12 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.195.22 - - [25/Nov/2025:15:56:12 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:13 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:13 +0100] "GET /build.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:13 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.195.22 - - [25/Nov/2025:15:56:14 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:14 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:14 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:15 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.195.22 - - [25/Nov/2025:15:56:15 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:15 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.195.22 - - [25/Nov/2025:15:56:15 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:15 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.195.22 - - [25/Nov/2025:15:56:16 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:17 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.195.22 - - [25/Nov/2025:15:56:17 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:17 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.195.22 - - [25/Nov/2025:15:56:17 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.22 - - [25/Nov/2025:15:56:19 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:20 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:20 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:20 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:20 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:21 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:21 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:21 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:23 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.194.122 - - [25/Nov/2025:15:56:23 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:23 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:24 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:24 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:25 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:25 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:25 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:25 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:26 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:26 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:27 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:27 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:29 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:30 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:30 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:30 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:31 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:31 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:31 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:31 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:31 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:32 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:33 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.194.122 - - [25/Nov/2025:15:56:33 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:33 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:34 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:34 +0100] "GET /07.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:34 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:34 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:34 +0100] "GET /wp-sigunq.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:35 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:35 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:35 +0100] "GET /fw.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:36 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:36 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:36 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:36 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:36 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:37 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:37 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.194.122 - - [25/Nov/2025:15:56:38 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:38 +0100] "GET /wp-comments-post.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:38 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:39 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:39 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:39 +0100] "GET /plugins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:39 +0100] "GET /post.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:40 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:40 +0100] "GET /geju.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:40 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:41 +0100] "GET /hoot.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:41 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:41 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:41 +0100] "GET /mail.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:42 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:43 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:43 +0100] "GET /upfile.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:43 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:43 +0100] "GET /bypass.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:44 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:44 +0100] "GET /updates.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:44 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:44 +0100] "GET /ae.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:44 +0100] "GET /blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:45 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:45 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:45 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:45 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:46 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:46 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:46 +0100] "GET /123.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:46 +0100] "GET /9.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:47 +0100] "GET /admin-ajax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:47 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:48 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:48 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:48 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:48 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.194.122 - - [25/Nov/2025:15:56:49 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:49 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:49 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:49 +0100] "GET /form.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:50 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:50 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:50 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:50 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.194.122 - - [25/Nov/2025:15:56:51 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.194.122 - - [25/Nov/2025:15:56:51 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.209.47 - - [25/Nov/2025:17:08:03 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36 OPR/106.0.0.0" 104.23.209.31 - - [25/Nov/2025:17:08:03 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 104.23.209.31 - - [25/Nov/2025:17:08:03 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 104.23.209.31 - - [25/Nov/2025:17:08:04 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 104.23.209.31 - - [25/Nov/2025:17:08:04 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.2365.66" 104.23.209.31 - - [25/Nov/2025:17:08:04 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 104.23.209.31 - - [25/Nov/2025:17:08:04 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" 162.158.175.91 - - [25/Nov/2025:17:37:37 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.42.163 - - [25/Nov/2025:18:37:58 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:00 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:00 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:01 +0100] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:02 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:02 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:02 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:02 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:03 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:03 +0100] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:03 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:03 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:04 +0100] "GET /wp-admin/user/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:04 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:04 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:04 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:05 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:05 +0100] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:06 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:06 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:06 +0100] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:06 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:06 +0100] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:07 +0100] "GET /wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 162 "-" "-" 172.70.42.163 - - [25/Nov/2025:18:38:07 +0100] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 162 "-" "-" 172.71.134.113 - - [25/Nov/2025:19:28:27 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.122.34 - - [25/Nov/2025:19:28:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.240.205 - - [25/Nov/2025:19:42:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 172.69.130.217 - - [25/Nov/2025:22:46:50 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.200 YaBrowser/24.1.0.0 Safari/537.36" 172.69.130.217 - - [25/Nov/2025:22:46:50 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" 172.69.130.217 - - [25/Nov/2025:22:46:50 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6280.88 Safari/537.36" 172.69.130.217 - - [25/Nov/2025:22:46:51 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" 172.69.130.217 - - [25/Nov/2025:22:46:51 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.69.130.217 - - [25/Nov/2025:22:46:51 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 172.69.130.217 - - [25/Nov/2025:22:46:51 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 172.64.223.6 - - [25/Nov/2025:22:49:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.245.187 - - [25/Nov/2025:22:57:21 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:23 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.165 - - [25/Nov/2025:22:57:24 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:26 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:26 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:26 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:27 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:27 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.245.165 - - [25/Nov/2025:22:57:27 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.245.165 - - [25/Nov/2025:22:57:27 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:28 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:28 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.245.165 - - [25/Nov/2025:22:57:28 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:30 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.165 - - [25/Nov/2025:22:57:31 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:31 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:31 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:31 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:33 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:33 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:33 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:34 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:35 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:35 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:35 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:35 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:35 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:36 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:36 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:36 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:36 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:38 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:38 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:38 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:39 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:39 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:39 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:39 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:40 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:40 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:42 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:42 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:42 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:43 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:43 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:43 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:43 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:44 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:44 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:45 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:46 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:46 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:47 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:47 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:48 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:48 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:49 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:49 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:50 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:50 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:50 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:51 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:51 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:52 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:53 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:53 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:53 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.245.187 - - [25/Nov/2025:22:57:55 +0100] "GET /system/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:55 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:55 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:56 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:57 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:57 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:57 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:57 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:57 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:59 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:59 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:57:59 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:59 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:57:59 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:00 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:01 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:01 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:02 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:02 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:02 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:02 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:03 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:04 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:04 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:04 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:10 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:10 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:11 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:11 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:11 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:12 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:12 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:13 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:13 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:13 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:14 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:14 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.245.187 - - [25/Nov/2025:22:58:15 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:15 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:16 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:16 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:16 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:17 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:17 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:17 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:18 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:18 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:18 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:18 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:19 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.245.187 - - [25/Nov/2025:22:58:19 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:19 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:20 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.245.187 - - [25/Nov/2025:22:58:20 +0100] "GET /components/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [25/Nov/2025:22:58:21 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.50.159 - - [25/Nov/2025:23:02:14 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:16 +0100] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:16 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:16 +0100] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:17 +0100] "GET /wp-includes/SimplePie/network.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:17 +0100] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:17 +0100] "GET /widgets.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:18 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:20 +0100] "GET /adds.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:20 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:20 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:21 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [25/Nov/2025:23:02:21 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:22 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:22 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:22 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:23 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:23 +0100] "GET /abe.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:25 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:25 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:26 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:26 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:26 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:27 +0100] "GET /cloud.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:27 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:27 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:28 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:28 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:28 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:29 +0100] "GET /text.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:29 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:29 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:31 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:31 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:31 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:32 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:32 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:32 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:33 +0100] "GET /files/css_compare.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:34 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:34 +0100] "GET /uana.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:34 +0100] "GET /duck.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:35 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:35 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:35 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:36 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:36 +0100] "GET /siteheads.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:36 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:37 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:37 +0100] "GET /ioxi-rex4.php7 HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:37 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:37 +0100] "GET /wp-info.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:38 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:38 +0100] "GET /ws.php7 HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:38 +0100] "GET /rss.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:39 +0100] "GET /pekok.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:39 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:39 +0100] "GET /wp-aa.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:40 +0100] "GET /cart.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:40 +0100] "GET /categories.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:40 +0100] "GET /compare.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:41 +0100] "GET /refund.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:41 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:41 +0100] "GET /wishlist.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:42 +0100] "GET /results.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:42 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:43 +0100] "GET /222.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:43 +0100] "GET /atom.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:43 +0100] "GET /case.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:43 +0100] "GET /docs.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:44 +0100] "GET /ios.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:44 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:45 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:45 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:45 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:46 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:46 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:46 +0100] "GET /f.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:47 +0100] "GET /max.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:47 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:47 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:47 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:48 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:48 +0100] "GET /vv.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:48 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:49 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:49 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:49 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:50 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:50 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:50 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:51 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:51 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:51 +0100] "GET /el.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:52 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:52 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:52 +0100] "GET /conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.50.159 - - [25/Nov/2025:23:02:53 +0100] "GET /xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.26.177 - - [25/Nov/2025:23:37:33 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.207.113 - - [26/Nov/2025:06:50:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 172.71.172.234 - - [26/Nov/2025:06:50:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0" 172.70.211.207 - - [26/Nov/2025:06:50:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0" 162.158.111.38 - - [26/Nov/2025:06:51:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Mobile/15E148 Safari/604.1" 172.71.148.182 - - [26/Nov/2025:06:52:51 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0" 141.101.76.5 - - [26/Nov/2025:07:08:09 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.62.64 - - [26/Nov/2025:07:14:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0.1) Gecko/20100101 Firefox/125.0.1" 104.22.1.88 - - [26/Nov/2025:07:51:51 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.221.21 - - [26/Nov/2025:09:20:20 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.182.192 - - [26/Nov/2025:09:24:21 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.159.120.251 - - [26/Nov/2025:10:11:09 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 162.159.120.184 - - [26/Nov/2025:10:11:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.70.143.186 - - [26/Nov/2025:10:48:01 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.68.205.7 - - [26/Nov/2025:12:21:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 162.158.48.169 - - [26/Nov/2025:12:21:51 +0100] "HEAD / HTTP/1.1" 301 0 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 162.158.48.213 - - [26/Nov/2025:12:21:53 +0100] "GET / HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 172.69.151.199 - - [26/Nov/2025:14:05:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.151.57 - - [26/Nov/2025:14:05:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.172.87 - - [26/Nov/2025:14:25:21 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.148.122 - - [26/Nov/2025:14:25:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.151.199 - - [26/Nov/2025:14:29:57 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.144.96 - - [26/Nov/2025:14:29:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.50.158 - - [26/Nov/2025:16:09:33 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [26/Nov/2025:16:09:35 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [26/Nov/2025:16:09:35 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [26/Nov/2025:16:09:36 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [26/Nov/2025:16:09:37 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [26/Nov/2025:16:09:38 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [26/Nov/2025:16:09:38 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [26/Nov/2025:16:09:38 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [26/Nov/2025:16:09:39 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "-" 172.70.50.93 - - [26/Nov/2025:16:09:39 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:39 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:40 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:40 +0100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:40 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:40 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:41 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:41 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:41 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:41 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:41 +0100] "GET /wp-error.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:42 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:42 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:42 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:43 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:43 +0100] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:43 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:43 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:44 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:44 +0100] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:44 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:44 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:45 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:46 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:46 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:46 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:46 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:47 +0100] "GET /templates/beez3/error.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:47 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:47 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:47 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:48 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:48 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:48 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:49 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:50 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:51 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:52 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:52 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:53 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:53 +0100] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:53 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:53 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:54 +0100] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:54 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:54 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:54 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:55 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:55 +0100] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:56 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:56 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:56 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:56 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:57 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:57 +0100] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:57 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:57 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:58 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:58 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:58 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:58 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:59 +0100] "GET /plugins/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:59 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:59 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:09:59 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:00 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:00 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:00 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:01 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:01 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:01 +0100] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:02 +0100] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:02 +0100] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:02 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:03 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:03 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:03 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:03 +0100] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:04 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:04 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:04 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "-" 172.70.50.158 - - [26/Nov/2025:16:10:04 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "-" 172.71.195.108 - - [26/Nov/2025:18:36:52 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.42.178 - - [26/Nov/2025:19:23:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.144.21 - - [26/Nov/2025:21:00:15 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.148.123 - - [26/Nov/2025:21:00:30 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.64.223.7 - - [26/Nov/2025:22:38:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 141.101.99.29 - - [27/Nov/2025:06:54:50 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.172.205 - - [27/Nov/2025:06:55:06 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.111.14 - - [27/Nov/2025:06:57:58 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.5142.148 Safari/537.36" 104.23.253.86 - - [27/Nov/2025:06:57:58 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.5160.19 Safari/537.36" 104.23.175.111 - - [27/Nov/2025:07:23:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36" 162.158.172.208 - - [27/Nov/2025:09:57:06 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; MS-RTC S; MS-RTC LM 8; .NET CLR 1.1.4322)" 162.158.172.111 - - [27/Nov/2025:09:57:06 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.75 Safari/537.36" 172.64.198.228 - - [27/Nov/2025:09:57:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.10) Gecko/20050724 Firefox/1.0.6" 104.23.221.111 - - [27/Nov/2025:09:57:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Z981 Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.84 Mobile Safari/537.36" 162.158.103.200 - - [27/Nov/2025:09:57:07 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; Smartphone; 176x220)" 162.158.172.111 - - [27/Nov/2025:09:57:08 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)" 104.23.217.152 - - [27/Nov/2025:09:57:08 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2) Gecko/20100222 Ubuntu/10.04 (lucid) Firefox/3.6" 172.64.200.98 - - [27/Nov/2025:09:57:08 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.89 Safari/537.36 OPR/49.0.2725.39" 162.158.103.200 - - [27/Nov/2025:09:57:09 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36" 172.68.183.71 - - [27/Nov/2025:09:57:09 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; de-DE; rv:1.7.6) Gecko/20050322 Firefox/1.0.1" 172.64.200.98 - - [27/Nov/2025:09:57:10 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "More Firefox 3.0.13 user agents strings -->>" 172.64.200.182 - - [27/Nov/2025:09:57:10 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:47.0) Gecko/20100101 Firefox/47.0" 162.158.103.200 - - [27/Nov/2025:09:57:10 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Opera/9.00 (Windows NT 5.1; U; en)" 162.158.172.208 - - [27/Nov/2025:09:57:10 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.4) Gecko/20070531 Firefox/2.0.0.4 (Swiftfox)" 172.64.200.182 - - [27/Nov/2025:09:57:11 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.34 (KHTML, like Gecko) PhantomJS/1.9.8 Safari/534.34" 162.158.182.192 - - [27/Nov/2025:09:57:11 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; CMDTDF; BRI/1; AskTbORJ/5.15.15.36191)" 162.158.172.111 - - [27/Nov/2025:09:57:12 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPod; U; CPU iPhone OS 2_2_1 like Mac OS X; en-us) AppleWebKit/525.18.1 (KHTML, like Gecko) Version/3.1.1 Mobile/5H11 Safari/525.20" 162.158.172.111 - - [27/Nov/2025:09:57:12 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1b3) Gecko/20090405 Firefox/3.1b3" 104.23.223.133 - - [27/Nov/2025:09:57:12 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SM-G550T1 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.132 Mobile Safari/537.36" 104.23.217.47 - - [27/Nov/2025:09:57:12 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.4.2; ALCATEL ONE TOUCH 4037T Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.141 Mobile Safari/537.36" 104.23.217.47 - - [27/Nov/2025:09:57:13 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 7_0_4 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Coast/2.0.5.71150 Mobile/11B554a Safari/7534.48.3" 162.158.102.155 - - [27/Nov/2025:09:57:13 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_3 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13G33 Safari/601.1" 162.158.103.200 - - [27/Nov/2025:09:57:14 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-J327T1 Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.137 Mobile Safari/537.36" 172.64.200.182 - - [27/Nov/2025:09:57:14 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 2.3.6; en-us; Micromax A72 Build/GRK39F) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 104.23.223.111 - - [27/Nov/2025:09:57:14 +0100] "GET /web/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.4.2; LGMS323 Build/KOT49I.MS32310b) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.59 Mobile Safari/537.36" 162.158.172.208 - - [27/Nov/2025:09:57:14 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Opera/9.80 (MTK; Nucleus; Opera Mobi/2167; U; en-US) Presto/2.4.18 Version/10.00" 162.158.172.208 - - [27/Nov/2025:09:57:15 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.110 Safari/537.36" 162.158.172.208 - - [27/Nov/2025:09:57:15 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; yie10; rv:11.0) like Gecko" 104.23.223.133 - - [27/Nov/2025:09:57:16 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; LGLS676 Build/MXB48T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.124 Mobile Safari/537.36" 162.158.103.200 - - [27/Nov/2025:09:57:16 +0100] "GET /.env.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_2_1 like Mac OS X) AppleWebKit/604.4.7 (KHTML, like Gecko) FxiOS/10.4b8288 Mobile/15C153 Safari/604.4.7" 104.23.221.111 - - [27/Nov/2025:09:57:16 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:40.0) Gecko/20100101 Firefox/51.0" 104.23.221.111 - - [27/Nov/2025:09:57:17 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36" 162.158.87.61 - - [27/Nov/2025:11:39:53 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.144.21 - - [27/Nov/2025:11:39:58 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.69.17.38 - - [27/Nov/2025:15:18:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.42.178 - - [27/Nov/2025:16:06:24 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.195.107 - - [27/Nov/2025:16:07:13 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.94.172 - - [27/Nov/2025:16:38:53 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.240.205 - - [27/Nov/2025:16:38:54 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.147.153 - - [27/Nov/2025:19:17:38 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.20 Safari/537.36" 172.71.146.138 - - [27/Nov/2025:19:17:38 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36 Edg/125.0.2535.51" 172.71.146.138 - - [27/Nov/2025:19:17:38 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.56 Mobile Safari/537.36" 172.71.146.138 - - [27/Nov/2025:19:17:38 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.140 Safari/537.36 Vivaldi/6.4.3160.47" 172.71.146.138 - - [27/Nov/2025:19:17:39 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/24.0 Chrome/120.0.6099.144 Mobile Safari/537.36" 172.71.146.138 - - [27/Nov/2025:19:17:39 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6280.88 Safari/537.36" 172.71.146.138 - - [27/Nov/2025:19:17:39 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 172.64.217.52 - - [27/Nov/2025:20:41:17 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.2.87 - - [27/Nov/2025:21:55:25 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" 172.68.2.87 - - [27/Nov/2025:21:55:25 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.62 Safari/537.36" 172.68.2.87 - - [27/Nov/2025:21:55:26 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" 172.68.2.87 - - [27/Nov/2025:21:55:26 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" 172.68.2.87 - - [27/Nov/2025:21:55:26 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.86 Safari/537.36 Brave/1.62.162" 172.68.2.87 - - [27/Nov/2025:21:55:26 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; Nokia 2720 Flip) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.99 Mobile Safari/537.36 KAIOS/2.5" 172.68.2.87 - - [27/Nov/2025:21:55:26 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 104.23.221.111 - - [27/Nov/2025:22:45:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.183.63 - - [28/Nov/2025:03:01:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 172.70.90.23 - - [28/Nov/2025:08:43:54 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.172.13 - - [28/Nov/2025:08:46:17 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.245.39 - - [28/Nov/2025:10:16:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.164.111 - - [28/Nov/2025:12:14:59 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.248.61 - - [28/Nov/2025:12:15:14 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.68.234.182 - - [28/Nov/2025:14:49:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 172.68.23.67 - - [28/Nov/2025:21:57:26 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 11; en-US; V2027) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/89.0.4389.116 UCBrowser/13.4.0.1306 Mobile Safari/537.36" 172.68.22.67 - - [28/Nov/2025:21:57:27 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" 172.68.22.67 - - [28/Nov/2025:21:57:27 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 172.68.22.67 - - [28/Nov/2025:21:57:27 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; Nokia 2720 Flip) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.99 Mobile Safari/537.36 KAIOS/2.5" 172.68.22.67 - - [28/Nov/2025:21:57:27 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 172.68.22.67 - - [28/Nov/2025:21:57:27 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 172.68.22.67 - - [28/Nov/2025:21:57:27 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; CPH2381) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.163 Mobile Safari/537.36 OPR/76.3.4027.73374" 172.64.223.7 - - [28/Nov/2025:22:40:21 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.2.86 - - [28/Nov/2025:23:11:50 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.68.2.86 - - [28/Nov/2025:23:11:51 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.20 Safari/537.36" 172.68.2.86 - - [28/Nov/2025:23:11:51 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" 172.68.2.86 - - [28/Nov/2025:23:11:51 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36 OPR/106.0.0.0" 172.68.2.86 - - [28/Nov/2025:23:11:51 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 172.68.2.86 - - [28/Nov/2025:23:11:51 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 172.68.2.86 - - [28/Nov/2025:23:11:51 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 172.69.70.77 - - [29/Nov/2025:00:47:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.215.177 - - [29/Nov/2025:02:09:03 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 162.158.108.91 - - [29/Nov/2025:02:09:04 +0100] "GET /eng HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 172.71.124.206 - - [29/Nov/2025:02:09:15 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 172.71.218.120 - - [29/Nov/2025:02:09:15 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 162.158.95.108 - - [29/Nov/2025:02:56:08 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.240.204 - - [29/Nov/2025:02:56:23 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.187.5 - - [29/Nov/2025:08:50:44 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.221.110 - - [29/Nov/2025:10:29:48 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.182.193 - - [29/Nov/2025:10:30:23 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.134.112 - - [29/Nov/2025:11:00:44 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.229.112 - - [29/Nov/2025:11:00:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.250.218 - - [29/Nov/2025:15:02:56 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.110.68 - - [29/Nov/2025:15:02:56 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.242.219 - - [29/Nov/2025:15:02:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.63933643a353138363a3a343330333a303037343a363036323; +https://leakix.net)" 162.158.111.154 - - [29/Nov/2025:15:02:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.239.85 - - [29/Nov/2025:15:02:57 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.239.84 - - [29/Nov/2025:15:02:57 +0100] "POST /graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.240.204 - - [29/Nov/2025:15:02:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.13434336a333433616a3a303330333a303037343a363036323; +https://leakix.net)" 172.71.144.20 - - [29/Nov/2025:15:02:57 +0100] "POST /api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.239.85 - - [29/Nov/2025:15:02:58 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.94.200 - - [29/Nov/2025:15:02:58 +0100] "POST /api/graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.239.84 - - [29/Nov/2025:15:02:58 +0100] "POST /graphql/api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.248.60 - - [29/Nov/2025:15:02:58 +0100] "POST /api/gql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.148.123 - - [29/Nov/2025:15:02:59 +0100] "GET /swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.172.20 - - [29/Nov/2025:15:02:59 +0100] "GET /swagger/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.240.204 - - [29/Nov/2025:15:02:59 +0100] "GET /swagger/swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.248.60 - - [29/Nov/2025:15:02:59 +0100] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.242.219 - - [29/Nov/2025:15:02:59 +0100] "GET /swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.144.20 - - [29/Nov/2025:15:03:00 +0100] "GET /swagger/v1/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.144.20 - - [29/Nov/2025:15:03:00 +0100] "GET /v2/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.110.68 - - [29/Nov/2025:15:03:00 +0100] "GET /v3/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.148.123 - - [29/Nov/2025:15:03:00 +0100] "GET /api-docs/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.239.85 - - [29/Nov/2025:15:03:00 +0100] "GET /api/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.246.100 - - [29/Nov/2025:15:03:01 +0100] "GET /@vite/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.246.100 - - [29/Nov/2025:15:03:01 +0100] "GET /actuator/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.248.60 - - [29/Nov/2025:15:03:01 +0100] "GET /server HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.164.111 - - [29/Nov/2025:15:03:01 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.164.111 - - [29/Nov/2025:15:03:01 +0100] "GET /about HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.150.136 - - [29/Nov/2025:15:03:02 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.150.136 - - [29/Nov/2025:15:03:02 +0100] "GET /v2/_catalog HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.248.60 - - [29/Nov/2025:15:03:02 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.240.204 - - [29/Nov/2025:15:03:02 +0100] "GET /server-status HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.94.200 - - [29/Nov/2025:15:03:02 +0100] "GET /login.action HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.248.60 - - [29/Nov/2025:15:03:03 +0100] "GET /_all_dbs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.239.84 - - [29/Nov/2025:15:03:03 +0100] "GET /.DS_Store HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.164.111 - - [29/Nov/2025:15:03:03 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.144.20 - - [29/Nov/2025:15:03:03 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.150.136 - - [29/Nov/2025:15:03:03 +0100] "GET /s/5363e2639313e27363e2237313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.110.68 - - [29/Nov/2025:15:03:04 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.172.20 - - [29/Nov/2025:15:03:04 +0100] "GET /telescope/requests HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.110.68 - - [29/Nov/2025:15:03:04 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.150.136 - - [29/Nov/2025:15:03:04 +0100] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.94.200 - - [29/Nov/2025:15:03:18 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.172.20 - - [29/Nov/2025:15:03:18 +0100] "POST /graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.148.123 - - [29/Nov/2025:15:03:19 +0100] "POST /api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.94.200 - - [29/Nov/2025:15:03:20 +0100] "POST /api/graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.164.111 - - [29/Nov/2025:15:03:21 +0100] "POST /graphql/api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.239.85 - - [29/Nov/2025:15:03:21 +0100] "POST /api/gql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.240.204 - - [29/Nov/2025:15:03:22 +0100] "GET /swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.69.150.136 - - [29/Nov/2025:15:03:23 +0100] "GET /swagger/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.172.20 - - [29/Nov/2025:15:03:24 +0100] "GET /swagger/swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.248.60 - - [29/Nov/2025:15:03:25 +0100] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.94.200 - - [29/Nov/2025:15:03:25 +0100] "GET /swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.164.111 - - [29/Nov/2025:15:03:27 +0100] "GET /swagger/v1/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.246.100 - - [29/Nov/2025:15:03:27 +0100] "GET /v2/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [29/Nov/2025:15:03:28 +0100] "GET /v3/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.148.123 - - [29/Nov/2025:15:03:29 +0100] "GET /api-docs/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.240.204 - - [29/Nov/2025:15:03:31 +0100] "GET /api/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.172.20 - - [29/Nov/2025:15:03:31 +0100] "GET /@vite/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.69.150.136 - - [29/Nov/2025:15:03:32 +0100] "GET /actuator/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.172.20 - - [29/Nov/2025:15:03:34 +0100] "GET /server HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.172.20 - - [29/Nov/2025:15:03:34 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.164.111 - - [29/Nov/2025:15:03:35 +0100] "GET /about HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [29/Nov/2025:15:03:36 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.246.100 - - [29/Nov/2025:15:03:38 +0100] "GET /v2/_catalog HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.248.60 - - [29/Nov/2025:15:03:38 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.248.60 - - [29/Nov/2025:15:03:39 +0100] "GET /server-status HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.172.20 - - [29/Nov/2025:15:03:39 +0100] "GET /login.action HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [29/Nov/2025:15:03:41 +0100] "GET /_all_dbs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.144.20 - - [29/Nov/2025:15:03:42 +0100] "GET /.DS_Store HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [29/Nov/2025:15:03:43 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.240.204 - - [29/Nov/2025:15:03:44 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.164.111 - - [29/Nov/2025:15:03:45 +0100] "GET /s/035313e26373e21323e2430313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.246.100 - - [29/Nov/2025:15:03:46 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.110.68 - - [29/Nov/2025:15:03:47 +0100] "GET /telescope/requests HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.248.60 - - [29/Nov/2025:15:03:47 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.246.100 - - [29/Nov/2025:15:03:48 +0100] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.68.213.97 - - [29/Nov/2025:16:17:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 172.68.213.35 - - [29/Nov/2025:16:17:02 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 162.158.170.251 - - [29/Nov/2025:16:18:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 172.70.179.193 - - [29/Nov/2025:17:56:54 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.64.223.233 - - [29/Nov/2025:22:39:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.222.134 - - [30/Nov/2025:00:41:57 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [30/Nov/2025:01:16:06 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 162.158.230.177 - - [30/Nov/2025:02:17:04 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:05 +0100] "GET /neshe HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:06 +0100] "GET /akc.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:06 +0100] "GET /clss.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:06 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:07 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:07 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:08 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:08 +0100] "GET /jga.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:08 +0100] "GET /byp8.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:09 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:09 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:09 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:10 +0100] "GET /wander.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:10 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:10 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:11 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:11 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:11 +0100] "GET /d2.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:12 +0100] "GET /xc.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:12 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:12 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:13 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:13 +0100] "GET /20.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:13 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:14 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:14 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:15 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:15 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:15 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:16 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:16 +0100] "GET /4.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:16 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:17 +0100] "GET /r.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:17 +0100] "GET /v4.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:17 +0100] "GET /wp-22.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:18 +0100] "GET /makeasmtp.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:18 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:18 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:19 +0100] "GET /t.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:19 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:19 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:20 +0100] "GET //gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:20 +0100] "GET /6.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:20 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:21 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:21 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:22 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:22 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:22 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:23 +0100] "GET /go.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:23 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:23 +0100] "GET /kk.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:24 +0100] "GET /ff.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:24 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:24 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:25 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:25 +0100] "GET /vv.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:25 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:26 +0100] "GET /w.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:26 +0100] "GET /3.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:26 +0100] "GET /t.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:27 +0100] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:27 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:27 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:28 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:28 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:28 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:29 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:29 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:30 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.230.177 - - [30/Nov/2025:02:17:30 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 172.71.127.140 - - [30/Nov/2025:02:47:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.225.148 - - [30/Nov/2025:02:47:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.22.20.192 - - [30/Nov/2025:04:23:05 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.70.179.194 - - [30/Nov/2025:04:50:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 104.23.187.212 - - [30/Nov/2025:07:05:06 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.64.200.45 - - [30/Nov/2025:07:13:19 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.10) Gecko/20100915 Ubuntu/9.04 (jaunty) Firefox/3.6.10" 172.64.200.132 - - [30/Nov/2025:07:13:19 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.4 (KHTML, like Gecko) Version/10.0 Mobile/14G5047a Safari/602.1" 104.23.221.110 - - [30/Nov/2025:07:13:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:13.0) Gecko/20100101 Firefox/13.0.1" 172.64.198.228 - - [30/Nov/2025:07:13:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36 OPR/36.0.2130.66" 172.68.183.18 - - [30/Nov/2025:07:13:20 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.0.10) Gecko/2009042523 Ubuntu/9.04 (jaunty) Firefox/3.0.10" 172.68.159.164 - - [30/Nov/2025:07:13:20 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050311 Firefox/1.0.1" 172.68.159.164 - - [30/Nov/2025:07:13:21 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/3.0.197.0 Safari/532.0" 172.64.198.197 - - [30/Nov/2025:07:13:21 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SAMSUNG SM-T330NU Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.3 Chrome/38.0.2125.102 Safari/537.36" 172.64.198.197 - - [30/Nov/2025:07:13:21 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:49.0) Gecko/20100101 Firefox/49.0" 104.23.217.47 - - [30/Nov/2025:07:13:22 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36" 172.68.159.164 - - [30/Nov/2025:07:13:22 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/0.2.151.0 Safari/525.19" 104.23.223.111 - - [30/Nov/2025:07:28:32 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.221.110 - - [30/Nov/2025:07:30:43 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.232.69 - - [30/Nov/2025:07:43:35 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.172.86 - - [30/Nov/2025:08:15:59 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "DomainStatsBot/1.0 (https://domainstats.com/pages/our-bot)" 162.158.87.61 - - [30/Nov/2025:08:16:00 +0100] "HEAD / HTTP/1.1" 301 0 "-" "DomainStatsBot/1.0 (https://domainstats.com/pages/our-bot)" 162.159.120.251 - - [30/Nov/2025:11:00:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 108.162.245.57 - - [30/Nov/2025:11:00:46 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.216.20 - - [30/Nov/2025:11:38:22 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.216.21 - - [30/Nov/2025:11:41:41 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.99.50 - - [30/Nov/2025:14:07:39 +0100] "GET / HTTP/1.1" 301 162 "-" "2ip bot/1.1 (+https://2ip.io)" 104.23.172.39 - - [30/Nov/2025:14:07:40 +0100] "GET / HTTP/1.1" 301 162 "-" "2ip bot/1.1 (+https://2ip.io)" 104.23.166.169 - - [30/Nov/2025:14:07:41 +0100] "GET / HTTP/1.1" 301 162 "-" "2ip bot/1.1 (+https://2ip.io)" 172.71.195.107 - - [30/Nov/2025:14:50:49 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.38.207 - - [30/Nov/2025:16:06:10 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:11 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [30/Nov/2025:16:06:12 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [30/Nov/2025:16:06:12 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [30/Nov/2025:16:06:12 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [30/Nov/2025:16:06:13 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [30/Nov/2025:16:06:13 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [30/Nov/2025:16:06:13 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [30/Nov/2025:16:06:14 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [30/Nov/2025:16:06:14 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [30/Nov/2025:16:06:15 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:15 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:15 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:16 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:16 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:16 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:17 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:17 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:18 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:19 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:19 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:19 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:20 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:20 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:20 +0100] "GET /z60.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:21 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:21 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:21 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:22 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:22 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:22 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:23 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:23 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:24 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:24 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:24 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:25 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:25 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:26 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:26 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:27 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:27 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:27 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:28 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:28 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:29 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:29 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:29 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:30 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:30 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:30 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:31 +0100] "GET /moon.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:31 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:31 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:32 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:32 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:32 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:33 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:33 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:33 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:34 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:34 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:35 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:35 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:35 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:36 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:36 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:36 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:37 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:37 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:38 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:38 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:39 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:39 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:39 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:40 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [30/Nov/2025:16:06:40 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:13:30 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:13:49 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:35 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:50 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:50 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:51 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:51 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:51 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:52 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:52 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:53 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:54 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:54 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:54 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:55 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:55 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:56 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:56 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:56 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:58 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:58 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:58 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:59 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:14:59 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:00 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:00 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:01 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:01 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:01 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:02 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:02 +0100] "GET /juuuu.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:03 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:03 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:04 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:04 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:04 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:05 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:05 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:06 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:06 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:06 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:07 +0100] "GET /wp-freya.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:07 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:08 +0100] "GET /2eaa2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:08 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:09 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:09 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:10 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:10 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:10 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:11 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:11 +0100] "GET /shlo.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:12 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:12 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:12 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Nov/2025:16:15:13 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.70.174.248 - - [30/Nov/2025:17:28:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.68.23.67 - - [30/Nov/2025:20:12:34 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.20 Safari/537.36" 172.68.22.66 - - [30/Nov/2025:20:12:34 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.200 YaBrowser/24.1.0.0 Safari/537.36" 172.68.22.66 - - [30/Nov/2025:20:12:34 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 16_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.22.66 - - [30/Nov/2025:20:12:34 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; CPH2381) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.163 Mobile Safari/537.36 OPR/76.3.4027.73374" 172.68.22.66 - - [30/Nov/2025:20:12:35 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/124.0.6367.56 Mobile/15E148 Safari/604.1" 172.68.22.66 - - [30/Nov/2025:20:12:35 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.68.22.66 - - [30/Nov/2025:20:12:35 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 172.70.42.178 - - [30/Nov/2025:20:18:48 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.217.46 - - [30/Nov/2025:22:39:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.2.86 - - [01/Dec/2025:00:37:06 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" 172.68.3.33 - - [01/Dec/2025:00:37:06 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.62 Safari/537.36" 172.68.3.33 - - [01/Dec/2025:00:37:06 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" 172.68.3.33 - - [01/Dec/2025:00:37:06 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; Nokia 2720 Flip) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.99 Mobile Safari/537.36 KAIOS/2.5" 172.68.3.33 - - [01/Dec/2025:00:37:06 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" 172.68.3.33 - - [01/Dec/2025:00:37:06 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" 172.68.3.33 - - [01/Dec/2025:00:37:07 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36 Edg/125.0.2535.51" 104.23.187.226 - - [01/Dec/2025:01:27:32 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.210.227 - - [01/Dec/2025:01:52:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36(KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36" 108.162.210.144 - - [01/Dec/2025:03:14:27 +0100] "GET /txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.212.145 - - [01/Dec/2025:03:14:27 +0100] "GET /wp-content/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.212.145 - - [01/Dec/2025:03:14:28 +0100] "GET /wp-admin/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 141.101.84.236 - - [01/Dec/2025:04:28:12 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:14 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:14 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:14 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:15 +0100] "GET /wp-admin/css/colors/light/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:15 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:16 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:16 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:16 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:18 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:18 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:18 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:19 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:19 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:19 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:20 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:20 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:20 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:21 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:21 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:24 +0100] "GET /wp-comments.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:24 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:25 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:25 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:25 +0100] "GET /wp-content/Geforce.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:26 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:26 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:27 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:27 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:27 +0100] "GET /wp-content/plugins/HelloDollyV2/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:28 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:29 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:30 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:30 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:30 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:31 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:31 +0100] "GET /wp-content/themes/themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:32 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:32 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:32 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:33 +0100] "GET /wp-content/uploads/Geforce.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:34 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:34 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:34 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:35 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:36 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:37 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:37 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:37 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:38 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:38 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:38 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:39 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:39 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:40 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:40 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:40 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:41 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:41 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:42 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:42 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:43 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:43 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:43 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:44 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:44 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:45 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:45 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:45 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:46 +0100] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:46 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:47 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:47 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:47 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [01/Dec/2025:04:28:48 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:51 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:52 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:53 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:53 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:54 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:54 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:55 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:56 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:56 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:56 +0100] "GET /wp-content/uploads/woocommerce_uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:57 +0100] "GET /wp-content/uploads/woocommerce/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:57 +0100] "GET /wp-content/uploads/wc-logs/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:58 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:28:59 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:59 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:28:59 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:00 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:00 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:00 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:01 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:02 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:02 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:02 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:03 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:04 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:04 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:04 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:05 +0100] "GET /wp-includes/js/jcrop/jcrop.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:05 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:06 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:06 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:07 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:07 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:07 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:08 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:08 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:08 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:09 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:09 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:10 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:10 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:10 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:11 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:12 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:12 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:12 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:13 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:13 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:13 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:14 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:14 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:15 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:15 +0100] "GET /.well-known/acme-challenge/xa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:16 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:16 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:17 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:18 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:19 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:21 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:22 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [01/Dec/2025:04:29:22 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:23 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:23 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:24 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:25 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:26 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:26 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:27 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:27 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:28 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:28 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:29 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:29 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:30 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:30 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:31 +0100] "GET /dex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:31 +0100] "GET /doc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [01/Dec/2025:04:29:32 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:32 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [01/Dec/2025:04:29:32 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:33 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:34 +0100] "GET /files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:35 +0100] "GET /function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:35 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:35 +0100] "GET /gfile.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:36 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:36 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:36 +0100] "GET /i.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:37 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:37 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:37 +0100] "GET /inc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:38 +0100] "GET /index.bak.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:38 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:38 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:39 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:39 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:40 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:40 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:40 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:41 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:43 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:45 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:45 +0100] "GET /past.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:45 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:46 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:46 +0100] "GET /robots.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:46 +0100] "GET /shop.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:47 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:47 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [01/Dec/2025:04:29:48 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:49 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [01/Dec/2025:04:29:50 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [01/Dec/2025:04:29:51 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.3 - - [01/Dec/2025:06:09:18 +0100] "GET / HTTP/1.1" 301 162 "-" "curl/7.29.0" 172.71.247.72 - - [01/Dec/2025:07:02:55 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.248.60 - - [01/Dec/2025:07:04:53 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.103.202 - - [01/Dec/2025:07:32:36 +0100] "GET /kontakt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 172.68.65.134 - - [01/Dec/2025:07:32:38 +0100] "GET /eng/AboutUs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.141 Version/17.0 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [01/Dec/2025:07:32:39 +0100] "GET /eng/Contact.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 172.70.94.172 - - [01/Dec/2025:09:24:06 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.183.69 - - [01/Dec/2025:12:12:24 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 104.23.221.110 - - [01/Dec/2025:12:12:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 172.70.50.159 - - [01/Dec/2025:14:08:11 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.71.120.8 - - [01/Dec/2025:14:08:11 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 162.158.94.201 - - [01/Dec/2025:14:42:02 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.216.20 - - [01/Dec/2025:14:45:52 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.222.108 - - [01/Dec/2025:14:53:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 141.101.76.183 - - [01/Dec/2025:15:04:51 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 172.71.103.105 - - [01/Dec/2025:15:05:15 +0100] "GET /details.php?post_id=9&v=Favorite HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.71.195.107 - - [01/Dec/2025:15:09:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.151.200 - - [01/Dec/2025:15:28:50 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.164.93 - - [01/Dec/2025:15:28:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.172.87 - - [01/Dec/2025:15:40:08 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.110.68 - - [01/Dec/2025:15:40:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:35 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:37 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:38 +0100] "GET /.well-known/acme-challenge/xa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:38 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:38 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:39 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:39 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:40 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:41 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:41 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:42 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:43 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:44 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:45 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:47 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [01/Dec/2025:15:52:47 +0100] "GET /as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:47 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:48 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:49 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:50 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:50 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:51 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:52 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:52 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:53 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:54 +0100] "GET /dex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:55 +0100] "GET /doc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:56 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:56 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:56 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:57 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:52:58 +0100] "GET /files/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:58 +0100] "GET /function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:52:59 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:00 +0100] "GET /gfile.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:01 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:01 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:01 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:02 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:02 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:03 +0100] "GET /inc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:03 +0100] "GET /index.bak.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:04 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:05 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:05 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:06 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:06 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:07 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:07 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:08 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:08 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:09 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:09 +0100] "GET /past.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:10 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:10 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:10 +0100] "GET /robots.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:11 +0100] "GET /shop.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:11 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:12 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:12 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:13 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:13 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:14 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [01/Dec/2025:15:53:14 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:15 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:15 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:16 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:16 +0100] "GET /wp-admin/css/colors/light/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:17 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:17 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:17 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:18 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:18 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:18 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:19 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:19 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:20 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:21 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:21 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:21 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:22 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:23 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:23 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:24 +0100] "GET /wp-comments.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:24 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:25 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:25 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:25 +0100] "GET /wp-content/Geforce.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:26 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:26 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:27 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:27 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:28 +0100] "GET /wp-content/plugins/HelloDollyV2/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:28 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:29 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:29 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:30 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:30 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:31 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:31 +0100] "GET /wp-content/themes/themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:32 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:33 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:33 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [01/Dec/2025:15:53:34 +0100] "GET /wp-content/uploads/Geforce.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:34 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:34 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:35 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:36 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:36 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:37 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:38 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:38 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:39 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:39 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:39 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:40 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:40 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:40 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:41 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:41 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:46 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:47 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:48 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:48 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:50 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:51 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:52 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:52 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:52 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:54 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:55 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:55 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:55 +0100] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:57 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:53:57 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:53:58 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:00 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:00 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:00 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:01 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:01 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:02 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:02 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:02 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [01/Dec/2025:15:54:05 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:07 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:07 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:08 +0100] "GET /wp-content/uploads/woocommerce_uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:09 +0100] "GET /wp-content/uploads/woocommerce/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:09 +0100] "GET /wp-content/uploads/wc-logs/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:09 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:10 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:10 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:10 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:11 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:11 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:11 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:12 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:16 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:17 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:17 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:17 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:18 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:18 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:18 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:19 +0100] "GET /wp-includes/js/jcrop/jcrop.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:20 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:21 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:21 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:21 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:22 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:22 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [01/Dec/2025:15:54:22 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:23 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:23 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:23 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:24 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:24 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:25 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:25 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:25 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:26 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:27 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:27 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:28 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:29 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [01/Dec/2025:15:54:29 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [01/Dec/2025:15:54:30 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.221.110 - - [01/Dec/2025:16:11:41 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.221.110 - - [01/Dec/2025:16:12:23 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.211.195 - - [01/Dec/2025:16:58:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.70.42.179 - - [01/Dec/2025:17:14:38 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.23.67 - - [01/Dec/2025:20:23:28 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 172.68.23.67 - - [01/Dec/2025:20:23:28 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.62 Safari/537.36" 172.68.23.67 - - [01/Dec/2025:20:23:28 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36 OPR/106.0.0.0" 172.68.23.67 - - [01/Dec/2025:20:23:28 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.5414.120 Safari/537.36" 172.68.23.67 - - [01/Dec/2025:20:23:28 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 172.68.23.67 - - [01/Dec/2025:20:23:28 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36 OPR/106.0.0.0" 172.68.23.67 - - [01/Dec/2025:20:23:28 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.200 YaBrowser/24.1.0.0 Safari/537.36" 172.64.223.6 - - [01/Dec/2025:22:40:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.118.139 - - [02/Dec/2025:05:11:05 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:07 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:07 +0100] "GET /.well-known/acme-challenge/xa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:08 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:08 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:09 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:09 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:10 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:10 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:10 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:10 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:11 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:12 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:12 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:12 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:12 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:14 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:14 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:15 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:15 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:15 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:16 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:16 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:16 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:18 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:18 +0100] "GET /dex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:19 +0100] "GET /doc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:19 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:19 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:19 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:20 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:20 +0100] "GET /files/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:21 +0100] "GET /function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:21 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:21 +0100] "GET /gfile.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:22 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:22 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:22 +0100] "GET /i.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:22 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:23 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:23 +0100] "GET /inc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:24 +0100] "GET /index.bak.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:24 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:25 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:25 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:26 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:26 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:27 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:28 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:28 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:29 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:29 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:29 +0100] "GET /past.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:29 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:30 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:30 +0100] "GET /robots.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:30 +0100] "GET /shop.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:31 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [02/Dec/2025:05:11:32 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:32 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:33 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:33 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:33 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:33 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:34 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:34 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:35 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:35 +0100] "GET /wp-admin/css/colors/light/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:35 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:36 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:36 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:36 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:36 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [02/Dec/2025:05:11:37 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:37 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:37 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:38 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:39 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:40 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:40 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:40 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:41 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:41 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:41 +0100] "GET /wp-comments.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:42 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:42 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:42 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:43 +0100] "GET /wp-content/Geforce.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [02/Dec/2025:05:11:43 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:43 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:44 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:44 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:44 +0100] "GET /wp-content/plugins/HelloDollyV2/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:44 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:45 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:46 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:46 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:47 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:47 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:49 +0100] "GET /wp-content/themes/themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:50 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:50 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:52 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:52 +0100] "GET /wp-content/uploads/Geforce.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:52 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:54 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:54 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:55 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [02/Dec/2025:05:11:56 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:56 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:56 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:57 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:57 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:57 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:58 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:58 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:11:58 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:59 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:11:59 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:00 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:00 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:01 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:01 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:01 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:02 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:02 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:03 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:03 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:04 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:04 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:05 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:05 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:05 +0100] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:06 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:06 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:06 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:07 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:07 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:07 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:07 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:08 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:08 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:08 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:09 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:09 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:10 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:10 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:11 +0100] "GET /wp-content/uploads/woocommerce_uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:11 +0100] "GET /wp-content/uploads/woocommerce/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:11 +0100] "GET /wp-content/uploads/wc-logs/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:12 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:13 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:13 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:13 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:13 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:14 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:14 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:14 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:15 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:15 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:16 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:16 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:17 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:17 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:18 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:18 +0100] "GET /wp-includes/js/jcrop/jcrop.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:19 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:19 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:20 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:20 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:20 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:21 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:21 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:22 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:22 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:22 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:23 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:24 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:25 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:26 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:27 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:27 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:27 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:28 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [02/Dec/2025:05:12:28 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:28 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:30 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [02/Dec/2025:05:12:30 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.94.173 - - [02/Dec/2025:07:53:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.48.169 - - [02/Dec/2025:10:04:45 +0100] "HEAD / HTTP/1.1" 301 0 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 162.158.48.169 - - [02/Dec/2025:10:04:46 +0100] "GET / HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 172.69.195.72 - - [02/Dec/2025:12:35:54 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.216.20 - - [02/Dec/2025:12:37:59 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.50.33 - - [02/Dec/2025:13:02:44 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.70.50.109 - - [02/Dec/2025:13:02:44 +0100] "GET /images/pronat/TueJun3014092520209822.xlsx HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.70.50.87 - - [02/Dec/2025:13:37:34 +0100] "GET /images/pronat/MonMay712211520189682.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.71.103.56 - - [02/Dec/2025:14:12:48 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.70.50.135 - - [02/Dec/2025:14:12:48 +0100] "GET /images/pronat/MonMay712181520189335.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 162.159.110.2 - - [02/Dec/2025:14:27:31 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.61 - - [02/Dec/2025:14:27:32 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.61 - - [02/Dec/2025:14:27:33 +0100] "GET /.well-known/acme-challenge/xa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.61 - - [02/Dec/2025:14:27:33 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:33 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:34 +0100] "GET /403.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:34 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:34 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:35 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:27:35 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:27:35 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:36 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:36 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:36 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:36 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:37 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:37 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:27:38 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:38 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:38 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:39 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:39 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:40 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:27:40 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:40 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:40 +0100] "GET /dex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:41 +0100] "GET /doc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:41 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:41 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:42 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:42 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:42 +0100] "GET /files/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:42 +0100] "GET /function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:27:43 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:43 +0100] "GET /gfile.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:43 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:27:44 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:44 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:44 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:45 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:45 +0100] "GET /inc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:45 +0100] "GET /index.bak.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:46 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:46 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:27:46 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:47 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:47 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:48 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:48 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:48 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:49 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:50 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:50 +0100] "GET /past.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:27:51 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:51 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:52 +0100] "GET /robots.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:52 +0100] "GET /shop.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:53 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:53 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:54 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:54 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:54 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:55 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:55 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:55 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:27:56 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:56 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:57 +0100] "GET /wp-admin/css/colors/light/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:57 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:57 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:58 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:27:58 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:58 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:59 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:27:59 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:28:00 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:00 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:00 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:01 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:01 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:01 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:02 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:02 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:02 +0100] "GET /wp-comments.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:02 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:03 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:04 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:04 +0100] "GET /wp-content/Geforce.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:04 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:04 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:05 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:05 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:05 +0100] "GET /wp-content/plugins/HelloDollyV2/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:06 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:07 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:07 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:07 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:07 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:08 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:09 +0100] "GET /wp-content/themes/themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:09 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:09 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:10 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:10 +0100] "GET /wp-content/uploads/Geforce.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:11 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:11 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:11 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:11 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:12 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:12 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:12 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:13 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:13 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:13 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:14 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:14 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:14 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:14 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:15 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:15 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:15 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:16 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:16 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:16 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:17 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:17 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:18 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:18 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:28:19 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:20 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:28:20 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:20 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:20 +0100] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:21 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:21 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:21 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:22 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:22 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:22 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:28:23 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:23 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:23 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:23 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:24 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:24 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:24 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:28:25 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:25 +0100] "GET /wp-content/uploads/woocommerce_uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:26 +0100] "GET /wp-content/uploads/woocommerce/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:26 +0100] "GET /wp-content/uploads/wc-logs/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:26 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:26 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:27 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:27 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:28 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:29 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:29 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:29 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:29 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:30 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:30 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:31 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:31 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:31 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.110.2 - - [02/Dec/2025:14:28:32 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:32 +0100] "GET /wp-includes/js/jcrop/jcrop.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:33 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:33 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:33 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:34 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:34 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:34 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:35 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:35 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:36 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:36 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:36 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:37 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:37 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:37 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:37 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:38 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:38 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:38 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.110.2 - - [02/Dec/2025:14:28:39 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:39 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:39 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.110.2 - - [02/Dec/2025:14:28:40 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.157 - - [02/Dec/2025:15:56:10 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.70.42.179 - - [02/Dec/2025:15:56:56 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.8.79 - - [02/Dec/2025:16:20:18 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.57 - - [02/Dec/2025:16:20:19 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.57 - - [02/Dec/2025:16:20:19 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.57 - - [02/Dec/2025:16:20:19 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.57 - - [02/Dec/2025:16:20:20 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.57 - - [02/Dec/2025:16:20:20 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.57 - - [02/Dec/2025:16:20:20 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.57 - - [02/Dec/2025:16:20:20 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.57 - - [02/Dec/2025:16:20:21 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.57 - - [02/Dec/2025:16:20:21 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:21 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:21 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:22 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:22 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:22 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:22 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:23 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:23 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:23 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:23 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:24 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:24 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:24 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:25 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:25 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:25 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:25 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:26 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:26 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:26 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:26 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:27 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:27 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:27 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:27 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:28 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:28 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:28 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:28 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:29 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:29 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.79 - - [02/Dec/2025:16:20:29 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:29 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:30 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:30 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:30 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:30 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:31 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:31 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:31 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:31 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:32 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:32 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [02/Dec/2025:16:20:32 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [02/Dec/2025:16:20:32 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:29 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.151 - - [02/Dec/2025:18:58:30 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.151 - - [02/Dec/2025:18:58:31 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.151 - - [02/Dec/2025:18:58:31 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.151 - - [02/Dec/2025:18:58:31 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.151 - - [02/Dec/2025:18:58:32 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.151 - - [02/Dec/2025:18:58:32 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:32 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:33 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:33 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:33 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:34 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:34 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:34 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:35 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:35 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:35 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:36 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:36 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:36 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:37 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.233 - - [02/Dec/2025:18:58:37 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:37 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:38 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:38 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:38 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:38 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:39 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:39 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:39 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:40 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:40 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:40 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:41 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:41 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:41 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:42 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:42 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.233 - - [02/Dec/2025:18:58:42 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.233 - - [02/Dec/2025:18:58:43 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:43 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:43 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:44 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:44 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:44 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:44 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:45 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:45 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:45 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:46 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:46 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:46 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:47 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.233 - - [02/Dec/2025:18:58:47 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.233 - - [02/Dec/2025:18:58:47 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.120.184 - - [02/Dec/2025:19:53:58 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 162.159.120.209 - - [02/Dec/2025:19:53:58 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 162.159.120.209 - - [02/Dec/2025:19:53:58 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 162.159.120.209 - - [02/Dec/2025:19:53:58 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 162.159.120.209 - - [02/Dec/2025:19:53:58 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 162.159.120.209 - - [02/Dec/2025:19:53:59 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 162.159.120.209 - - [02/Dec/2025:19:53:59 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.71.195.108 - - [02/Dec/2025:21:04:45 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.214.228 - - [02/Dec/2025:21:37:42 +0100] "GET /images/pronat/MonMay712100020184841.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.68.229.185 - - [02/Dec/2025:22:12:56 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.71.120.72 - - [02/Dec/2025:22:12:56 +0100] "GET /images/pronat/MonMay712220820186150.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 162.158.94.200 - - [02/Dec/2025:22:25:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.1" 172.70.248.61 - - [02/Dec/2025:22:25:43 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.164.110 - - [02/Dec/2025:22:25:45 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.3" 172.71.164.110 - - [02/Dec/2025:22:25:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.71.172.53 - - [02/Dec/2025:22:25:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418." 172.70.207.114 - - [02/Dec/2025:22:25:55 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 162.158.94.200 - - [02/Dec/2025:22:25:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0." 172.68.213.229 - - [02/Dec/2025:22:26:02 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.172.53 - - [02/Dec/2025:22:26:11 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/122.0" 172.71.172.20 - - [02/Dec/2025:22:26:11 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 OPR/70.0.3728.71" 172.68.243.235 - - [02/Dec/2025:22:26:12 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.164.93 - - [02/Dec/2025:22:26:13 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.3" 162.158.187.18 - - [02/Dec/2025:22:26:18 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.144.20 - - [02/Dec/2025:22:26:19 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.82 Safari/537.36" 104.23.223.110 - - [02/Dec/2025:22:42:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.241.179 - - [02/Dec/2025:22:52:45 +0100] "GET /images/pronat/MonMay711563320181579.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.68.35.168 - - [03/Dec/2025:00:39:27 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.68.35.168 - - [03/Dec/2025:00:39:27 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.35.168 - - [03/Dec/2025:00:39:27 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.68.35.168 - - [03/Dec/2025:00:39:27 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.68.35.168 - - [03/Dec/2025:00:39:27 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.68.35.168 - - [03/Dec/2025:00:39:28 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.35.168 - - [03/Dec/2025:00:39:28 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 162.158.62.236 - - [03/Dec/2025:01:04:09 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.50.136 - - [03/Dec/2025:01:12:51 +0100] "GET /images/pronat/MonMay711525820184930.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.69.214.15 - - [03/Dec/2025:02:04:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.70.80.211 - - [03/Dec/2025:02:05:24 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:25 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.16 - - [03/Dec/2025:02:20:25 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.139.16 - - [03/Dec/2025:02:20:26 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.16 - - [03/Dec/2025:02:20:26 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.16 - - [03/Dec/2025:02:20:26 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.16 - - [03/Dec/2025:02:20:27 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.16 - - [03/Dec/2025:02:20:27 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:27 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:28 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:28 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:28 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:29 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [03/Dec/2025:02:20:29 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:29 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:30 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:30 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:30 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:31 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:31 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:31 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:32 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:32 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:32 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:33 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:33 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:33 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:34 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:34 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:34 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:35 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:35 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:35 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:36 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:36 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:36 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:36 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:37 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:37 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:37 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:38 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:38 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:38 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:39 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:39 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:39 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:40 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:40 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [03/Dec/2025:02:20:40 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:41 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:41 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:41 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:42 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:42 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:02:20:42 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:02:20:43 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.134.113 - - [03/Dec/2025:03:04:52 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.122.169 - - [03/Dec/2025:03:04:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.80.54 - - [03/Dec/2025:03:27:58 +0100] "GET /images/pronat/MonMay712010220185084.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 104.23.187.226 - - [03/Dec/2025:04:12:24 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.120.137 - - [03/Dec/2025:04:43:01 +0100] "GET /images/pronat/MonMay711592620182272.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.69.130.114 - - [03/Dec/2025:05:33:20 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.70.94.172 - - [03/Dec/2025:06:20:41 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.139.17 - - [03/Dec/2025:07:26:30 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:31 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:31 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:32 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:32 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:32 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:33 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:33 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:33 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:34 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:34 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:34 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:35 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:35 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:35 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:36 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:36 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:36 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:37 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:37 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:37 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:38 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [03/Dec/2025:07:26:38 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:38 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:39 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:39 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:39 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:40 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:40 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:40 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:41 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:41 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:41 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:42 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:42 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:42 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:43 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:43 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [03/Dec/2025:07:26:43 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:43 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:44 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:44 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:44 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:45 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:45 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:45 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:46 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:46 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.139.17 - - [03/Dec/2025:07:26:46 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:47 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:47 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:47 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.139.17 - - [03/Dec/2025:07:26:48 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.139.17 - - [03/Dec/2025:07:26:48 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.6.133 - - [03/Dec/2025:08:21:58 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.70.179.193 - - [03/Dec/2025:08:21:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.71.178.110 - - [03/Dec/2025:08:23:50 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.148.122 - - [03/Dec/2025:08:25:00 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.187.227 - - [03/Dec/2025:08:27:57 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.194.122 - - [03/Dec/2025:08:31:06 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 104.23.211.195 - - [03/Dec/2025:08:31:06 +0100] "GET /admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 104.23.213.27 - - [03/Dec/2025:08:31:07 +0100] "GET /ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.71.191.69 - - [03/Dec/2025:08:31:07 +0100] "GET /assets/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.71.191.35 - - [03/Dec/2025:08:31:08 +0100] "GET /assets/js/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 104.23.213.77 - - [03/Dec/2025:08:31:08 +0100] "GET /public/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.71.194.246 - - [03/Dec/2025:08:31:08 +0100] "GET /admin/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.70.35.161 - - [03/Dec/2025:08:31:09 +0100] "GET /admin/js/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.70.38.171 - - [03/Dec/2025:08:31:09 +0100] "GET /js/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.68.245.113 - - [03/Dec/2025:08:31:10 +0100] "GET /vendor/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 104.23.211.180 - - [03/Dec/2025:08:31:10 +0100] "GET /modules/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.70.174.248 - - [03/Dec/2025:08:31:11 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.71.222.192 - - [03/Dec/2025:08:33:36 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 104.23.213.151 - - [03/Dec/2025:08:33:36 +0100] "GET /admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 104.23.213.138 - - [03/Dec/2025:08:33:37 +0100] "GET /ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 104.23.211.192 - - [03/Dec/2025:08:33:37 +0100] "GET /assets/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.68.245.57 - - [03/Dec/2025:08:33:38 +0100] "GET /assets/js/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.71.190.247 - - [03/Dec/2025:08:33:38 +0100] "GET /public/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.71.194.248 - - [03/Dec/2025:08:33:38 +0100] "GET /admin/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 162.158.152.173 - - [03/Dec/2025:08:33:39 +0100] "GET /admin/js/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 162.158.152.170 - - [03/Dec/2025:08:33:39 +0100] "GET /js/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.70.175.153 - - [03/Dec/2025:08:33:40 +0100] "GET /vendor/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.68.245.64 - - [03/Dec/2025:08:33:40 +0100] "GET /modules/ckeditor/config.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.70.175.217 - - [03/Dec/2025:08:33:41 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.71.103.55 - - [03/Dec/2025:09:34:14 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)" 162.159.113.110 - - [03/Dec/2025:09:34:14 +0100] "GET / HTTP/1.1" 301 162 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)" 104.23.190.192 - - [03/Dec/2025:12:12:30 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:41 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.193 - - [03/Dec/2025:13:11:43 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [03/Dec/2025:13:11:43 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:43 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:43 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:44 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:44 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:44 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:45 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:45 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:45 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:45 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:46 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:46 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:46 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:46 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:47 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:47 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:47 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:47 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:48 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:48 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [03/Dec/2025:13:11:48 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:48 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:49 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:49 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:49 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:49 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:50 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:50 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:50 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:50 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:51 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:51 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:51 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:51 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:52 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:52 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:52 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:52 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:53 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:53 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:53 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:53 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:54 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:54 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [03/Dec/2025:13:11:54 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:54 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:55 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:55 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:55 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:55 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:56 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [03/Dec/2025:13:11:56 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [03/Dec/2025:13:11:56 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.203.91 - - [03/Dec/2025:14:23:57 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.159.104.45 - - [03/Dec/2025:14:29:36 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.207.114 - - [03/Dec/2025:15:15:48 +0100] "GET /wordpress/wp-admin/install.php HTTP/1.1" 301 162 "-" "Python-urllib/2.7" 172.69.94.23 - - [03/Dec/2025:15:23:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.71.198.65 - - [03/Dec/2025:15:23:17 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.70.126.203 - - [03/Dec/2025:15:29:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.71.195.107 - - [03/Dec/2025:16:00:35 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.42.178 - - [03/Dec/2025:16:10:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.195.107 - - [03/Dec/2025:16:24:07 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.190.192 - - [03/Dec/2025:16:40:16 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.216.20 - - [03/Dec/2025:18:14:00 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.232.81 - - [03/Dec/2025:18:53:19 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.225.148 - - [03/Dec/2025:18:53:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.78.174 - - [03/Dec/2025:18:56:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_0 like Mac OS X)" 172.69.78.174 - - [03/Dec/2025:18:56:38 +0100] "HEAD /readme.html HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_0 like Mac OS X)" 172.69.78.174 - - [03/Dec/2025:18:56:38 +0100] "HEAD /xmlrpc.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 172.69.78.174 - - [03/Dec/2025:18:56:39 +0100] "HEAD /wp-login.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 104.23.213.194 - - [03/Dec/2025:19:02:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 141.101.96.60 - - [03/Dec/2025:19:33:02 +0100] "GET /postnews.php HTTP/1.1" 301 162 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.110.69 - - [03/Dec/2025:19:33:05 +0100] "GET /ss.php?f_c=1 HTTP/1.1" 301 162 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.246.153 - - [03/Dec/2025:19:59:39 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 162.159.120.240 - - [03/Dec/2025:19:59:39 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 162.159.120.240 - - [03/Dec/2025:19:59:40 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 162.159.120.240 - - [03/Dec/2025:19:59:40 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 162.159.120.240 - - [03/Dec/2025:19:59:40 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 162.159.120.240 - - [03/Dec/2025:19:59:40 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 162.159.120.240 - - [03/Dec/2025:19:59:40 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.70.42.179 - - [03/Dec/2025:20:28:17 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.182.192 - - [03/Dec/2025:22:49:33 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.24.174 - - [04/Dec/2025:01:04:56 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:04:58 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:04:58 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:04:58 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:04:58 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:04:59 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:04:59 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:04:59 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:04:59 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:00 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:00 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:00 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:00 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:01 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:01 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:01 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:01 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:02 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:02 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:02 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:02 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.174 - - [04/Dec/2025:01:05:03 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.174 - - [04/Dec/2025:01:05:03 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:03 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:04 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:04 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:04 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:04 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:05 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:05 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:05 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:05 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:06 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:06 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:06 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:06 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:07 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:07 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.174 - - [04/Dec/2025:01:05:07 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:07 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:08 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:08 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:08 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:08 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:09 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:09 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:09 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:09 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:10 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:10 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:10 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.174 - - [04/Dec/2025:01:05:11 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:11 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:11 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.174 - - [04/Dec/2025:01:05:11 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.195.71 - - [04/Dec/2025:01:36:24 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:24 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:36:25 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:36:25 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:36:25 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:25 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:25 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:25 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:36:26 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:26 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:26 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:26 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:36:26 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:26 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:26 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:27 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:27 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:27 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:27 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:27 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:36:27 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:36:27 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:28 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:28 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:36:28 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:36:28 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:28 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:36:28 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:36:29 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:29 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:29 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:29 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:36:29 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:29 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:29 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:30 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:30 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:30 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:30 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:30 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:30 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:31 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:31 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:31 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:31 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:31 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:36:31 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:36:31 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:36:32 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:32 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:32 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:36:32 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:32 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:32 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:33 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:36:33 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:33 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:33 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:33 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:33 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:36:33 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:36:34 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:34 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:34 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:34 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:34 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:36:34 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:36:34 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:35 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:35 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:35 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:35 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:36:35 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:36:35 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:36 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:36 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:36:36 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:36 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:36 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:36 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:36 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:37 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:37 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:36:37 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:37 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:37 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:37 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:38 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:36:38 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:38 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:38 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:36:38 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:38 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:38 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:36:39 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:39 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:36:39 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:39 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:39 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:39 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:39 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:40 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:36:40 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:40 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:36:40 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:40 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:40 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:41 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:41 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:41 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:41 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:36:41 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:36:41 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:36:41 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:42 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:42 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:42 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:42 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:42 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:36:42 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:43 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:36:43 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:43 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:43 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:36:43 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:43 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:43 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:44 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:44 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:44 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:44 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:44 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:44 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:44 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:45 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:45 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:45 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:45 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:36:45 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:45 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:36:46 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:46 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:36:46 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:46 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:46 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:46 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:46 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:47 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:36:47 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:47 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:47 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:47 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:47 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:48 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:48 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:36:48 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:48 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:48 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:36:48 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:48 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:49 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:49 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:36:49 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:49 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:49 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:36:49 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:50 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:50 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:50 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:50 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:50 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:36:50 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:50 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:36:51 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:51 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:51 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:36:51 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:51 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:51 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:51 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:52 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:52 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:52 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:36:52 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:52 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:52 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:53 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:53 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:53 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:36:53 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:53 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:53 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:53 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:54 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:54 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:36:54 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:54 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:54 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:36:54 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:55 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:55 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:55 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:55 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:55 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:55 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:36:55 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:56 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:36:56 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:36:56 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:56 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:56 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:56 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:36:56 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:57 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:36:57 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:57 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:57 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:36:57 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:57 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:58 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:58 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:58 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:36:58 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:58 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:36:58 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:58 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:36:59 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:59 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:59 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:36:59 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:59 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:36:59 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:00 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:00 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:00 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:00 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:00 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:00 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:00 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:01 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:01 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:01 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:01 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:01 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:01 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:37:02 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:02 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:02 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:02 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:02 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:02 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:37:02 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:37:03 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:03 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:03 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:03 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:03 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:37:03 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:04 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:37:04 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:04 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:37:04 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:04 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:04 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:04 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:05 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:05 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:05 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:37:05 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:37:05 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:37:05 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:05 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:06 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:37:06 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:06 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:06 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:06 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:06 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:07 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:07 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:07 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:07 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:37:07 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:07 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:07 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:08 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:08 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:08 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:08 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:08 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:08 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:37:09 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:09 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:37:09 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:09 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:09 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:37:09 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:09 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:10 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:10 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:10 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:10 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:10 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:10 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:37:10 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:11 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:11 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:11 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:11 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:37:11 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:11 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:37:12 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:12 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:12 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:12 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:12 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:37:12 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:12 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:13 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:13 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:13 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:37:13 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:13 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:13 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:14 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:14 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:14 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:14 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:14 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:14 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:14 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:15 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:15 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:15 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:15 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:15 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:37:15 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:16 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:37:16 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:16 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:16 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:16 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:16 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:16 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:17 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:17 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:17 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:17 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:17 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:17 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:18 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:18 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:18 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:18 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:18 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:18 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:18 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:19 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:19 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:19 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:19 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:37:19 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:37:19 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:19 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:20 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:20 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:20 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:20 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:20 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:20 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:21 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:21 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:21 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:21 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:21 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:21 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:37:21 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:22 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:22 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:22 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:22 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:37:22 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:22 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:23 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:37:23 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:23 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:23 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:23 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:23 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:23 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:24 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:24 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:24 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:37:24 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:24 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:24 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:37:25 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:25 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:37:25 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:25 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:25 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:25 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:37:25 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:26 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:26 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:26 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:26 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:37:26 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:37:26 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:26 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:27 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:37:27 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:27 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:27 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:27 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:27 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:28 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:28 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:28 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:28 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:37:28 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:28 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:28 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:29 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:29 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:29 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:29 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:29 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:29 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:30 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:30 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:30 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:30 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:30 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:37:30 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:30 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:31 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:31 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:31 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:37:31 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:31 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:31 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:31 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:32 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:32 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:32 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:32 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:32 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:32 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:33 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:33 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:33 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:33 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:33 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:33 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:33 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:34 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:34 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:37:34 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:34 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:34 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:34 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:35 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:35 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:35 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:35 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:35 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:35 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:35 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:36 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:36 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:36 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:36 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:36 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:36 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:37:37 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:37 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:37 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:37 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:37 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:37 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:37 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:38 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:38 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:38 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:38 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:38 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:37:38 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:38 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:37:39 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:37:39 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:39 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:39 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:39 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:39 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:40 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:40 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:37:40 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:40 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:40 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:40 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:40 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:41 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:41 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:41 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:41 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:41 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:41 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:42 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:37:42 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:42 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:37:42 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:42 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:37:42 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:42 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:43 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:43 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:43 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:37:43 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:43 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:43 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:44 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:44 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:44 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:44 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:37:44 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:44 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:37:44 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:45 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:45 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:45 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:45 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:37:45 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:45 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:45 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:37:46 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:46 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:46 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:46 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:46 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:46 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:47 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:47 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:47 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:47 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:47 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:47 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:47 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:48 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:48 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:48 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:48 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:37:48 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:48 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:37:49 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:37:49 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:49 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:49 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:49 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:49 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:37:49 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:50 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:50 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:37:50 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:50 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:50 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:50 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:51 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:51 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:51 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:37:51 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:51 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:51 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:51 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:52 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:52 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:52 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:52 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:52 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:52 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:52 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:53 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:53 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:53 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:37:53 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:37:53 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:53 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:54 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:54 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:54 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:54 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:37:54 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:37:54 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:37:54 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:55 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:55 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:37:55 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:55 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:55 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:55 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:56 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:56 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:56 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:56 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:56 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:56 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:56 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:57 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:37:57 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:57 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:37:57 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:57 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:37:57 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:57 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:58 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:37:58 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:37:58 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:37:58 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:58 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:37:58 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:59 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:59 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:59 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:59 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:59 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:59 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:37:59 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:00 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:38:00 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:00 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:00 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:38:00 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:00 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:01 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:01 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:01 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:01 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:01 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:01 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:01 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:02 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:02 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:02 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:02 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:02 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:02 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:38:03 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:38:03 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:03 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:38:03 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:03 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:03 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:03 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:04 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:04 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:04 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:38:04 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:04 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:04 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:04 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:38:05 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:05 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:05 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:05 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:05 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:05 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:06 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:06 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:06 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:06 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:06 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:38:06 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:06 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:07 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:07 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:07 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:38:07 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:07 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:07 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:08 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:08 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:08 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:38:08 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:08 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:38:08 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:08 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:09 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:09 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:09 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:09 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:09 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:09 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:10 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:10 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:10 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:10 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:10 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:10 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:10 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:11 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:11 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:11 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:11 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:11 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:11 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:11 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:12 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:12 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:12 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:12 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:12 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:12 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:13 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:13 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:13 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:38:13 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:13 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:13 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:38:13 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:14 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:14 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:14 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:14 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:14 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:38:14 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:15 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:15 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:15 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:15 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:15 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:38:15 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:15 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:16 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:16 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:16 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:16 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:38:16 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:38:16 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:17 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:17 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:38:17 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:38:17 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:17 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:17 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:17 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:38:18 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:18 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:18 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:18 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:18 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:18 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:18 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:19 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:19 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:19 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:38:19 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:19 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:38:19 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:20 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:20 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:38:20 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:38:20 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:20 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:20 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:20 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:21 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:21 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:21 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:21 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:38:21 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:21 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:38:22 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:22 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:22 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:22 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:22 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:22 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:22 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:23 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:23 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:23 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:23 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:38:23 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:38:23 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:24 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:24 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:38:24 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:24 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:24 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:24 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:24 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:38:25 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:38:25 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:38:25 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:25 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:25 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:25 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:26 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:26 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:26 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:26 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:38:26 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:26 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:26 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:38:27 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:27 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:27 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:27 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:27 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:27 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:27 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:38:28 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:28 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:28 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:28 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:28 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:28 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:29 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:29 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:29 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:29 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:29 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:29 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:29 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:30 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:38:30 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:38:30 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:30 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:38:30 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:38:30 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:31 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:38:31 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:31 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:31 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:31 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:31 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:38:31 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:32 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:38:32 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:32 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:38:32 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:32 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:32 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:38:33 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:33 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:33 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:38:33 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:33 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:33 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:33 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:38:34 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:34 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:34 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:34 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:34 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:34 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:34 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:38:35 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:35 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.69.195.71 - - [04/Dec/2025:01:38:35 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:35 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:35 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:35 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:36 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:36 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:36 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:36 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:36 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:38:36 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:36 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:38:37 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:37 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:38:37 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:37 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:37 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:37 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:38 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:38 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:38 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:38 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:38:38 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:38:38 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:38 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:39 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:39 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:39 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:39 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:39 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:39 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:39 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:40 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:38:40 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:38:40 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:38:40 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:40 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:40 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:41 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:41 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.69.195.71 - - [04/Dec/2025:01:38:41 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:41 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:41 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:38:41 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:41 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:42 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:42 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:42 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:42 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:42 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:42 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:38:43 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.69.195.71 - - [04/Dec/2025:01:38:43 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:43 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:43 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:43 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:43 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:43 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:44 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:44 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:44 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:44 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:44 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:38:44 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:45 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:45 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:45 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:38:45 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:45 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:45 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:45 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:46 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:46 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.195.71 - - [04/Dec/2025:01:38:46 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:46 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:46 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:46 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:46 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:47 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:47 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:47 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:47 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:47 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:38:47 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:48 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:48 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:48 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:48 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:48 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:48 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.69.195.71 - - [04/Dec/2025:01:38:48 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:49 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:49 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:49 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:49 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:49 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:49 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.69.195.71 - - [04/Dec/2025:01:38:50 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:50 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:50 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:38:50 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:50 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:50 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:50 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:51 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:51 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:51 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:51 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:51 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.69.195.71 - - [04/Dec/2025:01:38:51 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:52 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:52 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:52 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:52 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:38:52 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:52 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:52 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:38:53 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:53 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:53 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.69.195.71 - - [04/Dec/2025:01:38:53 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:53 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.69.195.71 - - [04/Dec/2025:01:38:53 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:53 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:54 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:54 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:54 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:54 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:38:54 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:54 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:55 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:55 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.69.195.71 - - [04/Dec/2025:01:38:55 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:55 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:55 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.195.71 - - [04/Dec/2025:01:38:55 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.195.71 - - [04/Dec/2025:01:38:55 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:56 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:56 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.195.71 - - [04/Dec/2025:01:38:56 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.195.71 - - [04/Dec/2025:01:38:56 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.195.71 - - [04/Dec/2025:01:38:56 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:57 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:57 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:38:57 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:38:57 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:38:57 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:57 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.241.112 - - [04/Dec/2025:01:38:57 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:58 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:58 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:38:58 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:58 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:38:58 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:58 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:58 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.241.112 - - [04/Dec/2025:01:38:59 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.241.112 - - [04/Dec/2025:01:38:59 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:59 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:38:59 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:59 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:38:59 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:38:59 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:00 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.241.112 - - [04/Dec/2025:01:39:00 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:00 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:00 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:00 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:00 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:00 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:01 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:01 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.241.112 - - [04/Dec/2025:01:39:01 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:01 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:01 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:01 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:01 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.241.112 - - [04/Dec/2025:01:39:02 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:02 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:02 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:02 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.241.112 - - [04/Dec/2025:01:39:02 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:02 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:02 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:03 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:03 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:03 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:03 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:03 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:03 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:04 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:04 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:04 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.241.112 - - [04/Dec/2025:01:39:04 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:04 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.241.112 - - [04/Dec/2025:01:39:04 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:04 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:04 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:05 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:05 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:05 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:05 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.241.112 - - [04/Dec/2025:01:39:05 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.241.112 - - [04/Dec/2025:01:39:05 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:05 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:06 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.241.112 - - [04/Dec/2025:01:39:06 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:06 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:06 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:06 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:06 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:06 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:07 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:07 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:07 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:07 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:07 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.241.112 - - [04/Dec/2025:01:39:07 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:07 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:08 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:08 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:08 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:08 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.241.112 - - [04/Dec/2025:01:39:08 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:08 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:08 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.241.112 - - [04/Dec/2025:01:39:09 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:09 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.241.112 - - [04/Dec/2025:01:39:09 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:09 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.241.112 - - [04/Dec/2025:01:39:09 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:09 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:09 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:10 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.241.112 - - [04/Dec/2025:01:39:10 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:10 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:10 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:10 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:10 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:10 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:11 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:11 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:11 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.241.112 - - [04/Dec/2025:01:39:11 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:11 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:11 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:11 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:12 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:12 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:12 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:12 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.241.112 - - [04/Dec/2025:01:39:12 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:12 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:12 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:13 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:13 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:13 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.241.112 - - [04/Dec/2025:01:39:13 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:13 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:13 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.241.112 - - [04/Dec/2025:01:39:13 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:13 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:14 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:14 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:14 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:14 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.241.112 - - [04/Dec/2025:01:39:14 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:14 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:14 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.241.112 - - [04/Dec/2025:01:39:15 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:15 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.241.112 - - [04/Dec/2025:01:39:15 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:15 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:15 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:15 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:15 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.241.112 - - [04/Dec/2025:01:39:16 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:16 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.241.112 - - [04/Dec/2025:01:39:16 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:16 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:16 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:16 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:16 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.241.112 - - [04/Dec/2025:01:39:17 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.241.112 - - [04/Dec/2025:01:39:17 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:17 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.241.112 - - [04/Dec/2025:01:39:17 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:17 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:17 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:17 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:18 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.241.112 - - [04/Dec/2025:01:39:18 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.241.112 - - [04/Dec/2025:01:39:18 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.241.112 - - [04/Dec/2025:01:39:18 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.241.112 - - [04/Dec/2025:01:39:18 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:18 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:18 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:19 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.241.112 - - [04/Dec/2025:01:39:19 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:19 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:19 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:19 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.241.112 - - [04/Dec/2025:01:39:19 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.241.112 - - [04/Dec/2025:01:39:19 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:20 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:20 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.241.112 - - [04/Dec/2025:01:39:20 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.241.112 - - [04/Dec/2025:01:39:20 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.241.112 - - [04/Dec/2025:01:39:20 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:20 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.241.112 - - [04/Dec/2025:01:39:20 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:21 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:21 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:21 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.241.112 - - [04/Dec/2025:01:39:21 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.241.112 - - [04/Dec/2025:01:39:21 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:21 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.241.112 - - [04/Dec/2025:01:39:21 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.241.112 - - [04/Dec/2025:01:39:21 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.241.112 - - [04/Dec/2025:01:39:22 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.241.112 - - [04/Dec/2025:01:39:22 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.241.112 - - [04/Dec/2025:01:39:22 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.110.205 - - [04/Dec/2025:04:27:22 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.154.139 - - [04/Dec/2025:05:24:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.38.207 - - [04/Dec/2025:05:29:30 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:31 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:32 +0100] "GET /alex.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:32 +0100] "GET /ctex1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:32 +0100] "GET /t1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:33 +0100] "GET /xxx.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:33 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:33 +0100] "GET /wp-admin/network/plugins.php?fm=true HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:34 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:34 +0100] "GET /bless HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:34 +0100] "GET /yellow.php HTTP/1.1" 301 162 "-" "-" 162.158.230.104 - - [04/Dec/2025:05:29:35 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:35 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:35 +0100] "GET /cafe.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:36 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:36 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:36 +0100] "GET /css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:37 +0100] "GET /tiny.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:37 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:37 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:38 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:38 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:38 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:39 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:39 +0100] "GET /akc.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:39 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:40 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:40 +0100] "GET /wander.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:40 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:41 +0100] "GET /jga.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:41 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:41 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:42 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:42 +0100] "GET /wp-content/plugins/edaewni/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:42 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:43 +0100] "GET /clss.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:43 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:43 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:44 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:44 +0100] "GET /auth.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:44 +0100] "GET /ioxi-o2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:45 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:45 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:45 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:46 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:46 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:46 +0100] "GET /file32.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:47 +0100] "GET /file18.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:47 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:47 +0100] "GET /inde.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:48 +0100] "GET /wb.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:48 +0100] "GET /wp-mail.php/wp-includes/ID3/rnEPv9.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:48 +0100] "GET /tgrs.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:49 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:49 +0100] "GET /public/fm.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:49 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:50 +0100] "GET /d2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:50 +0100] "GET /dev1s.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:50 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:51 +0100] "GET /xenium4.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:51 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:51 +0100] "GET /lsd.php? HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:51 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:52 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:52 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:52 +0100] "GET /css/item.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:53 +0100] "GET /shop/lock.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:53 +0100] "GET /wp-content/BypassBest.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:53 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:54 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:54 +0100] "GET /about3.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:54 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:55 +0100] "GET /app/webroot/filemanager.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:55 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:55 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:56 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:56 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:56 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:57 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:57 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:57 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:58 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:58 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:58 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:59 +0100] "GET /admin.php/upload/css.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:59 +0100] "GET /555.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:29:59 +0100] "GET /file3.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:30:00 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:30:00 +0100] "GET /mws.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:30:00 +0100] "GET /kk.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [04/Dec/2025:05:30:01 +0100] "GET /ff.php HTTP/1.1" 301 162 "-" "-" 172.71.172.86 - - [04/Dec/2025:05:59:06 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 172.70.207.113 - - [04/Dec/2025:06:35:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:48:57 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:48:57 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:48:57 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:48:58 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:48:59 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:00 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:01 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:02 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:03 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:03 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:03 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:03 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:03 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:03 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:03 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:03 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:03 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:04 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:05 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:06 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:07 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:08 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:09 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:10 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:11 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:12 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:13 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:14 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:15 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:16 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:17 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:17 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:17 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:17 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:17 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:17 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:17 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:17 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:17 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:18 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:19 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:20 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:21 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:22 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:23 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:24 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:25 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:26 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:27 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:28 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:29 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:30 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:31 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:32 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:33 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:34 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:35 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:36 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:37 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:38 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:39 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:40 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:41 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:42 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:43 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:44 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:45 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:46 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:47 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:48 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:49 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:50 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:51 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:52 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:53 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:54 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:55 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:49:56 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:57 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:58 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:49:58 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:49:58 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:58 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:58 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:58 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:58 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:58 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:58 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:49:59 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:00 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:00 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:00 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:50:00 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:00 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:00 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:00 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:00 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:00 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:01 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:02 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:03 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:04 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:05 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:06 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:07 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:08 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:09 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:10 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:11 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:12 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:13 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:14 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:14 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:14 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:14 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:50:14 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:14 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:14 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:14 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:14 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:15 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:15 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:15 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:15 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:15 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:15 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:15 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:15 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:15 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:16 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:17 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:18 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:19 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:20 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:21 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:22 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:23 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:24 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:25 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:26 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:27 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:28 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:29 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:30 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:31 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:32 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:33 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:34 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:35 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:36 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:36 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:36 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:36 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:36 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:36 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:36 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:36 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:50:36 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:37 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:38 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:38 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:38 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:38 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:38 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:38 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:38 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:38 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:38 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:39 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:40 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:41 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:42 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:43 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:44 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:45 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:46 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:47 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:48 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:49 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:50 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.62.237 - - [04/Dec/2025:06:50:51 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:52 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.62.237 - - [04/Dec/2025:06:50:53 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:53 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:53 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.62.237 - - [04/Dec/2025:06:50:53 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.62.237 - - [04/Dec/2025:06:50:53 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.190.192 - - [04/Dec/2025:08:36:39 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.158.77 - - [04/Dec/2025:08:36:42 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.70.43.71 - - [04/Dec/2025:09:08:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.43.43 - - [04/Dec/2025:09:08:01 +0100] "GET /.well-known/lo.php HTTP/1.1" 301 162 "-" "-" 172.70.43.43 - - [04/Dec/2025:09:08:02 +0100] "GET /images/cloud.php HTTP/1.1" 301 162 "-" "-" 172.70.43.43 - - [04/Dec/2025:09:08:03 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 104.23.209.46 - - [04/Dec/2025:09:08:04 +0100] "GET /cgi-bin/about.php HTTP/1.1" 301 162 "-" "-" 172.70.43.43 - - [04/Dec/2025:09:08:05 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.70.43.43 - - [04/Dec/2025:09:08:06 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.70.43.43 - - [04/Dec/2025:09:08:06 +0100] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 162 "-" "-" 172.70.43.43 - - [04/Dec/2025:09:08:07 +0100] "GET /yanz.php HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:08 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:09 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 104.23.209.30 - - [04/Dec/2025:09:08:10 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:10 +0100] "GET /wp-includes/assets/wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:11 +0100] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:11 +0100] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:12 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:13 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:16 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:17 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:17 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "-" 172.70.43.71 - - [04/Dec/2025:09:08:19 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "-" 104.23.209.46 - - [04/Dec/2025:09:08:20 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 104.23.209.46 - - [04/Dec/2025:09:08:23 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "-" 104.23.209.46 - - [04/Dec/2025:09:08:24 +0100] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 162 "-" "-" 104.23.209.46 - - [04/Dec/2025:09:08:25 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 104.23.209.46 - - [04/Dec/2025:09:08:28 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "-" 172.69.95.38 - - [04/Dec/2025:09:36:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.69.178.44 - - [04/Dec/2025:09:36:02 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://www.immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:37 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:38 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:39 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Dec/2025:10:14:39 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:39 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:40 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:40 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:40 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:40 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:41 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:41 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:41 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:41 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:42 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:42 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:42 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:42 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:43 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:43 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:43 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:44 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:44 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:44 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:44 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:45 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:45 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:45 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Dec/2025:10:14:45 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:46 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:46 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:46 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:46 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:47 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:47 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:47 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:47 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:48 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:48 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:48 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:48 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:49 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:49 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:49 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:49 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:50 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:50 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:50 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:50 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:51 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:51 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:51 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:51 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Dec/2025:10:14:52 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Dec/2025:10:14:52 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Dec/2025:10:14:52 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.251.195 - - [04/Dec/2025:12:11:59 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.71.195.107 - - [04/Dec/2025:14:26:49 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.42.178 - - [04/Dec/2025:14:38:52 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.151.66 - - [04/Dec/2025:16:33:18 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 162.158.175.91 - - [04/Dec/2025:17:04:32 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 172.68.23.67 - - [04/Dec/2025:18:23:44 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.22.67 - - [04/Dec/2025:18:23:44 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 172.68.22.67 - - [04/Dec/2025:18:23:44 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.22.67 - - [04/Dec/2025:18:23:44 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.68.22.67 - - [04/Dec/2025:18:23:44 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.68.22.67 - - [04/Dec/2025:18:23:44 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.22.67 - - [04/Dec/2025:18:23:44 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 162.158.41.22 - - [04/Dec/2025:19:24:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 172.64.223.7 - - [04/Dec/2025:22:19:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.126.44 - - [04/Dec/2025:22:59:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.70.126.45 - - [04/Dec/2025:23:00:50 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.35.168 - - [05/Dec/2025:00:49:40 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.35.168 - - [05/Dec/2025:00:49:40 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.68.35.168 - - [05/Dec/2025:00:49:40 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.68.35.168 - - [05/Dec/2025:00:49:40 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.68.35.168 - - [05/Dec/2025:00:49:40 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.68.35.168 - - [05/Dec/2025:00:49:40 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.68.35.168 - - [05/Dec/2025:00:49:41 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 104.23.223.84 - - [05/Dec/2025:01:38:03 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.223.85 - - [05/Dec/2025:01:41:26 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.42.179 - - [05/Dec/2025:02:38:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.79.15 - - [05/Dec/2025:02:38:40 +0100] "GET /images/pronat/MonMay711525820184930.jpg HTTP/1.1" 301 162 "-" "Googlebot-Image/1.0" 104.23.251.47 - - [05/Dec/2025:06:21:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 172.70.143.186 - - [05/Dec/2025:06:44:29 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.69.22.53 - - [05/Dec/2025:11:40:32 +0100] "GET / HTTP/1.1" 301 162 "https://img.idu.edu.tr//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:14 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.224 - - [05/Dec/2025:12:05:15 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.224 - - [05/Dec/2025:12:05:15 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.224 - - [05/Dec/2025:12:05:15 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.224 - - [05/Dec/2025:12:05:16 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.224 - - [05/Dec/2025:12:05:16 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.224 - - [05/Dec/2025:12:05:16 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.224 - - [05/Dec/2025:12:05:16 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.224 - - [05/Dec/2025:12:05:17 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.224 - - [05/Dec/2025:12:05:17 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.224 - - [05/Dec/2025:12:05:17 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:17 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:18 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:18 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:18 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:18 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:19 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:19 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:19 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:19 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:20 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:20 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:20 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:20 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:21 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:21 +0100] "GET /install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:21 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:21 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:22 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:22 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:22 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:22 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:23 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:23 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:23 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:23 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:24 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:24 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:24 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:24 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:25 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:25 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:25 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:25 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:26 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:26 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:26 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:27 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:27 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:27 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:27 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:28 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:28 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:28 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:28 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:29 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:29 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:29 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:29 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:30 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:30 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:30 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:30 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:31 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:31 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:31 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:31 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:32 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:32 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:32 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:32 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:33 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:33 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:33 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:33 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:34 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:34 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:34 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:34 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:35 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:35 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:35 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:35 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:36 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:36 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:36 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:36 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:37 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:37 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:37 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:37 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:38 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:38 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:38 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:38 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:39 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:39 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:39 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:39 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:40 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:40 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:40 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:41 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:41 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:41 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:41 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:42 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:42 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:42 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:42 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:43 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:43 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:43 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:43 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:44 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:44 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:44 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:44 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:45 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:45 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:45 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:45 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:46 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:46 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:46 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:46 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:47 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:47 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:47 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:47 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:48 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:48 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:48 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:49 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:49 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:49 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:49 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:50 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:50 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:50 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:50 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:51 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:51 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:51 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:51 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:52 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:52 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:52 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:52 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:53 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:53 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:53 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:53 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:54 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:54 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:54 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:54 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:55 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:55 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:55 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:55 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:56 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:56 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:56 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:56 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:05:57 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:57 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:57 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:57 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:58 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:58 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:05:58 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:59 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:59 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:59 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:05:59 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:00 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:06:00 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:00 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:00 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:01 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:01 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:01 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:01 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:02 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:02 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:02 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:02 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:03 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:03 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:03 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:03 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:04 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:04 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:04 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:04 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:05 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:05 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:06:05 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:05 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:06 +0100] "GET /system/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:06 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:06 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:06 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:07 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:07 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:06:07 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:07 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:08 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:08 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:06:08 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:08 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:09 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:09 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:09 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:09 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:10 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:10 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:10 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:10 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:11 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:11 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:06:11 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:12 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:12 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:12 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:12 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:13 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:13 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:13 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:13 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:14 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:14 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:14 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:14 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:06:15 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:15 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:15 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:15 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:16 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:16 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:16 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:16 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:17 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [05/Dec/2025:12:06:17 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:17 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:17 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:18 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:18 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:18 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [05/Dec/2025:12:06:18 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [05/Dec/2025:12:06:19 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.221.111 - - [05/Dec/2025:12:14:44 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.217.47 - - [05/Dec/2025:12:16:30 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.144.21 - - [05/Dec/2025:15:35:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.148.183 - - [05/Dec/2025:15:35:59 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.214.190 - - [05/Dec/2025:21:45:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.70.214.190 - - [05/Dec/2025:21:45:57 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.70.214.190 - - [05/Dec/2025:21:45:57 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.70.214.190 - - [05/Dec/2025:21:45:57 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.70.214.190 - - [05/Dec/2025:21:45:57 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.70.214.190 - - [05/Dec/2025:21:45:57 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.70.214.190 - - [05/Dec/2025:21:45:57 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 104.23.221.111 - - [05/Dec/2025:22:49:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.49.201 - - [05/Dec/2025:22:50:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 162.158.42.28 - - [06/Dec/2025:00:53:49 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 162.158.41.179 - - [06/Dec/2025:00:53:49 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 162.158.41.179 - - [06/Dec/2025:00:53:49 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 162.158.41.179 - - [06/Dec/2025:00:53:49 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 162.158.41.179 - - [06/Dec/2025:00:53:50 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 162.158.41.179 - - [06/Dec/2025:00:53:50 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 162.158.41.179 - - [06/Dec/2025:00:53:50 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.64.192.21 - - [06/Dec/2025:02:38:09 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.90.170 - - [06/Dec/2025:02:40:58 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.124.238 - - [06/Dec/2025:04:31:10 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 162.158.88.162 - - [06/Dec/2025:04:31:12 +0100] "GET /admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.68.151.107 - - [06/Dec/2025:05:40:40 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.64.200.98 - - [06/Dec/2025:08:15:59 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.87 Safari/537.36" 104.23.217.153 - - [06/Dec/2025:08:15:59 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G950F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.111 Mobile Safari/537.36" 172.64.198.196 - - [06/Dec/2025:08:16:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20100101 Firefox/17.0" 104.23.223.133 - - [06/Dec/2025:08:16:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7 (.NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)" 172.64.200.182 - - [06/Dec/2025:08:16:01 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050414 Firefox/1.0.3 (ax)" 172.68.159.176 - - [06/Dec/2025:08:16:01 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/312.5 (KHTML, like Gecko) Safari/312.3" 172.68.183.71 - - [06/Dec/2025:08:16:01 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; LG-M153 Build/MXB48T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.98 Mobile Safari/537.36" 162.158.103.4 - - [06/Dec/2025:08:16:02 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.7" 172.68.183.71 - - [06/Dec/2025:08:16:02 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.8.0.8) Gecko/20061116 Firefox/1.5.0.8" 172.64.198.196 - - [06/Dec/2025:08:16:02 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "More Firefox 1.5.0.11 user agents strings -->>" 172.68.183.71 - - [06/Dec/2025:08:16:02 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; chromeframe/11.0.696.57)" 172.64.200.182 - - [06/Dec/2025:08:16:03 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; MANM; rv:11.0) like Gecko" 162.158.182.192 - - [06/Dec/2025:08:16:03 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-us; LGLS740 Build/KOT49I.LS740ZV6) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.1599.103 Mobile Safari/537.36" 172.64.198.229 - - [06/Dec/2025:08:16:03 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Opera/9.02 (X11; Linux i686; U; en)" 104.23.223.110 - - [06/Dec/2025:08:16:04 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.4.2; QMV7B Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 172.64.198.196 - - [06/Dec/2025:08:16:04 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36" 104.23.217.153 - - [06/Dec/2025:08:16:04 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.1 (KHTML, like Gecko) Ubuntu/10.04 Chromium/14.0.813.0 Chrome/14.0.813.0 Safari/535.1" 172.68.159.176 - - [06/Dec/2025:08:16:04 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36" 172.64.198.229 - - [06/Dec/2025:08:16:05 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; sv-SE) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16" 104.23.223.133 - - [06/Dec/2025:08:16:05 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 5.1.1; Mobile; rv:58.0) Gecko/58.0 Firefox/58.0" 104.23.221.110 - - [06/Dec/2025:08:16:06 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 7.0; LGMS210 Build/NRD90U; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36" 104.23.217.47 - - [06/Dec/2025:08:16:06 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (windows; U; Windows NT 5.1; zh-CN; rv:1.7.12) Gecko/20050919 Firefox/1.0.7" 172.64.200.98 - - [06/Dec/2025:08:16:07 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Opera/6.05 (Windows ME; U) [fr]" 172.64.200.182 - - [06/Dec/2025:08:16:07 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB7.5; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MDDS; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0C; BRI/2)" 172.64.198.196 - - [06/Dec/2025:08:16:07 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; sv-se) AppleWebKit/418.9 (KHTML, like Gecko) Safari/419.3" 172.64.198.229 - - [06/Dec/2025:08:16:08 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.3; en-us; sdk Build/MR1) AppleWebKit/536.23 (KHTML, like Gecko) Version/4.3 Mobile Safari/536.23" 104.23.221.110 - - [06/Dec/2025:08:16:09 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36" 172.64.200.98 - - [06/Dec/2025:08:16:09 +0100] "GET /web/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; en) Opera 9.27" 162.158.172.94 - - [06/Dec/2025:08:16:09 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.1.2; HTCONE Build/JZO54K) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.166 Mobile Safari/535.19" 104.23.217.47 - - [06/Dec/2025:08:16:10 +0100] "GET /.env.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.0.2; SAMSUNG SM-A500F Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.3 Chrome/38.0.2125.102 Mobile Safari/537.36" 162.158.182.192 - - [06/Dec/2025:08:16:10 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 10_2_1 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.79 Mobile/14D27 Safari/602.1" 172.64.198.229 - - [06/Dec/2025:08:16:10 +0100] "GET /web/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/412.6 (KHTML, like Gecko) Safari/412.2" 172.64.200.182 - - [06/Dec/2025:08:16:11 +0100] "GET /.env.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; fr) AppleWebKit/412.6 (KHTML, like Gecko) Safari/412.2" 104.23.217.47 - - [06/Dec/2025:08:16:11 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.0; SM-G900V Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.93 Mobile Safari/537.36" 172.64.200.182 - - [06/Dec/2025:08:16:11 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 7.1; Mi A1 Build/N2G47H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36" 104.23.223.110 - - [06/Dec/2025:08:16:11 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:58.0) Gecko/20100101 Firefox/58.0" 104.23.221.108 - - [06/Dec/2025:08:16:12 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; fr-fr) AppleWebKit/312.8 (KHTML, like Gecko) Safari/312.6" 104.23.221.110 - - [06/Dec/2025:08:16:12 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; ko-kr) AppleWebKit/531.21.11 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10" 172.68.183.71 - - [06/Dec/2025:08:16:13 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.0; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0" 162.158.182.192 - - [06/Dec/2025:08:16:13 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.0 Mobile/14E277 Safari/602.1" 104.23.223.133 - - [06/Dec/2025:08:16:13 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13) AppleWebKit/604.1.23(KHTML, like Gecko) Version/10.2 Safari/604.1.23" 162.158.182.192 - - [06/Dec/2025:08:16:13 +0100] "GET /images/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; 5056N Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.111 Mobile Safari/537.36" 162.158.103.84 - - [06/Dec/2025:08:16:14 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36" 104.23.223.110 - - [06/Dec/2025:08:16:14 +0100] "GET /.env.save.1 HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; WOW64; Trident/4.0; GTB7.4; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)" 172.64.200.182 - - [06/Dec/2025:08:16:14 +0100] "GET /images/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36 OPR/46.0.2597.57" 104.23.223.110 - - [06/Dec/2025:08:16:14 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-J327P Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36" 104.23.217.47 - - [06/Dec/2025:08:16:16 +0100] "GET /API/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_1 like Mac OS X; vi-vn) AppleWebKit/532.9 (KHTML, like Gecko) Version/4.0.5 Mobile/8B117 Safari/6531.22.7" 172.64.198.196 - - [06/Dec/2025:08:16:17 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.2.2; en-us; mk808 Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30" 104.23.221.110 - - [06/Dec/2025:08:16:17 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.94 AOL/9.7 AOLBuild/4343.4049.US Safari/537.36" 104.22.1.198 - - [06/Dec/2025:11:10:19 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.211.194 - - [06/Dec/2025:11:10:19 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.48.168 - - [06/Dec/2025:11:36:49 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 172.69.150.137 - - [06/Dec/2025:12:51:26 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; es-AR; rv:1.8.1.12) Gecko/20080207 Ubuntu/7.10 (gutsy) Firefox/2.0.0.12" 172.71.148.157 - - [06/Dec/2025:12:51:26 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.1; Galaxy Nexus Build/JRN84D) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.166 Mobile Safari/535.19" 172.71.148.122 - - [06/Dec/2025:12:51:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; USCC-US780 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 172.71.172.52 - - [06/Dec/2025:12:51:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.4.4; en-us; SAMSUNG SM-N910V 4G Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Version/2.0 Chrome/34.0.1847.76 Mobile Safari/537.36" 172.71.164.110 - - [06/Dec/2025:12:51:27 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)" 162.158.110.123 - - [06/Dec/2025:12:51:27 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36" 172.71.246.98 - - [06/Dec/2025:12:51:28 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1" 172.70.240.204 - - [06/Dec/2025:12:51:28 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0; vivo 1713 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.124 Mobile Safari/537.36" 162.158.87.62 - - [06/Dec/2025:12:51:28 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-us) AppleWebKit/531.21.8 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10 FBSMTWB" 172.70.248.199 - - [06/Dec/2025:12:51:28 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Opera/9.80 (Linux armv7l; HbbTV/1.2.1 (; Philips; ; ; ; ) CE-HTML/1.0 NETTV/6.0.2 SmartTvA/3.0.0 (PhilipsTV, 6.1.1,) en) Presto/2.12.407 Version/12.50" 172.71.172.52 - - [06/Dec/2025:12:51:28 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E; Tablet PC 2.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729)" 162.158.110.68 - - [06/Dec/2025:12:51:28 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:41.0) Gecko/20100101 Firefox/41.0" 172.71.164.93 - - [06/Dec/2025:12:51:29 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" 172.71.144.21 - - [06/Dec/2025:12:51:29 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.94 AOL/9.7 AOLBuild/4343.4043.US Safari/537.36" 172.71.144.96 - - [06/Dec/2025:12:51:29 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 OPR/50.0.2762.58" 162.158.110.68 - - [06/Dec/2025:12:51:29 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 11_2_1 like Mac OS X) AppleWebKit/604.1.34 (KHTML, like Gecko) CriOS/63.0.3239.73 Mobile/15C153 Safari/604.1" 162.158.95.245 - - [06/Dec/2025:12:51:30 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Opera/8.02 (Windows NT 5.1; U; en)" 172.71.172.20 - - [06/Dec/2025:12:51:30 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.2; rv:12.0) Gecko/20100101 Firefox/12.0" 172.71.164.93 - - [06/Dec/2025:12:51:30 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_0 like Mac OS X; en-us) AppleWebKit/532.9 (KHTML, like Gecko) Version/4.0.5 Mobile/8A293 Safari/6531.22.7 electricmobilesimulator" 172.71.164.110 - - [06/Dec/2025:12:51:30 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.95 Safari/537.36 OPR/15.0.1147.153" 172.71.148.122 - - [06/Dec/2025:12:51:30 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36 OPR/48.0.2685.52" 104.23.239.80 - - [06/Dec/2025:12:51:30 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_2) AppleWebKit/602.3.7 (KHTML, like Gecko) Version/10.0.2 Safari/602.3.7" 172.69.150.137 - - [06/Dec/2025:12:51:31 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.2) Gecko/20100316 AskTbSPC2/3.9.1.14019 Firefox/3.6.2" 162.158.110.123 - - [06/Dec/2025:12:51:31 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; pt-BR; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 GTB7.1" 172.71.144.21 - - [06/Dec/2025:12:51:31 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Ubuntu/10.10 Chromium/10.0.648.0 Chrome/10.0.648.0 Safari/534.16" 172.70.240.204 - - [06/Dec/2025:12:51:31 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; sv-SE) AppleWebKit/525.27.1 (KHTML, like Gecko) Version/3.2.1 Safari/525.27.1" 172.71.172.52 - - [06/Dec/2025:12:51:31 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6" 172.71.148.122 - - [06/Dec/2025:12:51:31 +0100] "GET /web/.env HTTP/1.1" 301 162 "-" "Opera/9.80 (X11; Linux x86_64; U; it) Presto/2.2.15 Version/10.10" 104.23.239.85 - - [06/Dec/2025:12:51:32 +0100] "GET /.env.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.95 Safari/537.36" 162.158.87.24 - - [06/Dec/2025:12:51:32 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Opera/9.25 (Macintosh; Intel Mac OS X; U; en)" 162.158.87.24 - - [06/Dec/2025:12:51:32 +0100] "GET /web/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; ru; rv:1.9.0.1) Gecko/2008071719 Firefox/3.0.1" 162.158.94.201 - - [06/Dec/2025:12:51:32 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.114 Safari/537.36" 162.158.95.245 - - [06/Dec/2025:12:51:32 +0100] "GET /.env.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36" 172.69.150.137 - - [06/Dec/2025:12:51:32 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36" 162.158.110.123 - - [06/Dec/2025:12:51:33 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Mozilla/4.78 (Windows NT 5.1; U) Opera 7.54 [de]" 172.69.150.137 - - [06/Dec/2025:12:51:33 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36" 104.23.239.80 - - [06/Dec/2025:12:51:33 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 3.2; en-gb; GT-P6200 Build/HTJ85B) AppleWebKit/534.13 (KHTML, like Gecko) Version/4.0 Safari/534.13" 172.71.172.20 - - [06/Dec/2025:12:51:33 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11" 162.158.95.245 - - [06/Dec/2025:12:51:33 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; rv:1.7.3) Gecko/20040914 Firefox/0.10" 172.71.148.122 - - [06/Dec/2025:12:51:33 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr-TR; rv:1.7.6) Gecko/20050321 Firefox/1.0.2" 172.71.172.52 - - [06/Dec/2025:12:51:33 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Maxthon/4.4.6.2000 Chrome/30.0.1599.101 Safari/537.36" 172.69.150.137 - - [06/Dec/2025:12:51:33 +0100] "GET /images/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.8.1.12) Gecko/20080203 SUSE/2.0.0.12-2.1 Firefox/2.0.0.12" 172.71.164.93 - - [06/Dec/2025:12:51:33 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 2.3.4; en-us; LG-LS855 Build/GRJ22) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 162.158.110.68 - - [06/Dec/2025:12:51:33 +0100] "GET /.env.save.1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; nl; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10 ( .NET CLR 3.5.30729)" 172.70.240.204 - - [06/Dec/2025:12:51:34 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "More Safari 2.0.2 user agents strings -->>" 162.158.110.123 - - [06/Dec/2025:12:51:34 +0100] "GET /images/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SAMSUNG SM-G900T Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" 162.158.94.201 - - [06/Dec/2025:12:51:34 +0100] "GET /API/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_2 like Mac OS X) AppleWebKit/602.3.12 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 104.23.239.80 - - [06/Dec/2025:12:51:34 +0100] "GET /.env.save.1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36" 172.71.164.110 - - [06/Dec/2025:12:51:34 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; U; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 Opera 10.62" 162.158.110.123 - - [06/Dec/2025:12:51:34 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; en) Opera 8.52" 172.71.148.122 - - [06/Dec/2025:12:51:34 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A5354b Safari/604.1" 104.23.239.80 - - [06/Dec/2025:12:51:34 +0100] "GET /API/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 2.2.1; en-us; VM670 Build/FRG83) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 162.158.110.123 - - [06/Dec/2025:12:51:35 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/534.14 (KHTML, like Gecko) Chrome/9.0.601.0 Safari/534.14" 104.23.239.80 - - [06/Dec/2025:12:51:35 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:55.0) Gecko/20100101 Firefox/55.0" 172.68.151.106 - - [06/Dec/2025:13:28:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 172.64.200.99 - - [06/Dec/2025:14:00:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.64.200.99 - - [06/Dec/2025:14:00:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.64.200.99 - - [06/Dec/2025:14:00:14 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 172.64.200.99 - - [06/Dec/2025:14:00:14 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.64.200.99 - - [06/Dec/2025:14:00:15 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.64.200.99 - - [06/Dec/2025:14:00:15 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.64.200.99 - - [06/Dec/2025:14:00:15 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.64.200.99 - - [06/Dec/2025:14:00:16 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.64.200.99 - - [06/Dec/2025:14:00:16 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.64.200.99 - - [06/Dec/2025:14:00:16 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.64.200.99 - - [06/Dec/2025:14:00:17 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.69.151.199 - - [06/Dec/2025:16:23:28 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.110.123 - - [06/Dec/2025:16:23:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.172.86 - - [06/Dec/2025:16:57:43 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.150.136 - - [06/Dec/2025:16:57:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.126.44 - - [06/Dec/2025:17:44:40 +0100] "GET / HTTP/1.1" 301 162 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 104.22.1.198 - - [06/Dec/2025:18:24:13 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.71.23.18 - - [06/Dec/2025:18:24:13 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.68.211.13 - - [06/Dec/2025:18:41:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 108.162.237.172 - - [06/Dec/2025:18:55:00 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.68.71.26 - - [06/Dec/2025:18:55:00 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.71.134.112 - - [06/Dec/2025:19:16:35 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.127.137 - - [06/Dec/2025:19:16:35 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 162.158.107.4 - - [06/Dec/2025:19:40:41 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.106.220 - - [06/Dec/2025:19:40:41 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.106.220 - - [06/Dec/2025:19:40:42 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.106.220 - - [06/Dec/2025:19:40:42 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.106.220 - - [06/Dec/2025:19:40:42 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.106.220 - - [06/Dec/2025:19:40:43 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.106.220 - - [06/Dec/2025:19:40:43 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.106.220 - - [06/Dec/2025:19:40:43 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:40:43 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.106.220 - - [06/Dec/2025:19:40:44 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.106.220 - - [06/Dec/2025:19:40:44 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.81.205 - - [06/Dec/2025:19:40:44 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.106.220 - - [06/Dec/2025:19:40:44 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.81.205 - - [06/Dec/2025:19:40:44 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.106.220 - - [06/Dec/2025:19:40:45 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.81.205 - - [06/Dec/2025:19:40:45 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.106.220 - - [06/Dec/2025:19:40:45 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.81.205 - - [06/Dec/2025:19:40:45 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.81.205 - - [06/Dec/2025:19:40:45 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:46 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.81.205 - - [06/Dec/2025:19:40:46 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:46 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.81.205 - - [06/Dec/2025:19:40:46 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:40:46 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.81.205 - - [06/Dec/2025:19:40:46 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:40:47 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:40:47 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.81.205 - - [06/Dec/2025:19:40:47 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:47 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:40:47 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.81.205 - - [06/Dec/2025:19:40:48 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:48 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.81.205 - - [06/Dec/2025:19:40:48 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.107.4 - - [06/Dec/2025:19:40:48 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.81.205 - - [06/Dec/2025:19:40:49 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:49 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.81.205 - - [06/Dec/2025:19:40:49 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:40:49 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.81.205 - - [06/Dec/2025:19:40:49 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:40:49 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.81.205 - - [06/Dec/2025:19:40:49 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:50 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:40:50 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:40:50 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:40:50 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:50 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:40:50 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:40:51 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:40:51 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:51 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:40:51 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:40:51 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:51 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:40:52 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:52 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:40:52 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:40:52 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:52 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:52 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:40:52 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:40:52 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:40:53 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:40:53 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:40:53 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:53 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:40:53 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:40:53 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:54 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:40:54 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:54 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:54 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:40:54 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:40:54 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:40:55 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:40:55 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:55 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:55 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:40:55 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:40:55 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:56 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.107.4 - - [06/Dec/2025:19:40:56 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:40:56 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:56 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:56 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:57 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:40:57 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:40:57 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:57 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:40:57 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:40:57 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:40:58 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:58 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:58 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:58 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:58 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:40:58 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.68.242.108 - - [06/Dec/2025:19:40:58 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:40:59 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:40:59 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:40:59 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:40:59 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:40:59 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [06/Dec/2025:19:40:59 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:40:59 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:00 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:00 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:41:00 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:00 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.68.242.108 - - [06/Dec/2025:19:41:00 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:00 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:00 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:41:01 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:41:01 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:41:01 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:01 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:01 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:01 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:02 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:02 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.68.242.108 - - [06/Dec/2025:19:41:02 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:02 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:02 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:02 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:02 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:02 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:03 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:03 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:03 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:03 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:04 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [06/Dec/2025:19:41:04 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:41:04 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:04 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:41:04 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:04 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:04 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:04 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:05 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:41:05 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:05 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:05 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:05 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:41:05 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:06 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:06 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:06 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:06 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:41:06 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:06 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:41:06 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:07 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:07 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:07 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:41:07 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:07 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:41:07 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [06/Dec/2025:19:41:08 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:08 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:08 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:41:08 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:41:08 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:08 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:41:09 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:09 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:41:09 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:41:09 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:41:09 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:09 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:09 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:09 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [06/Dec/2025:19:41:10 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:10 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [06/Dec/2025:19:41:10 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:10 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:10 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:10 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:11 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:11 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:11 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:41:11 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:11 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:41:11 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:11 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:12 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:12 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:12 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [06/Dec/2025:19:41:12 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.68.242.108 - - [06/Dec/2025:19:41:12 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:13 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:13 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:13 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:41:13 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:13 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:13 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:13 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:13 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:41:14 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:14 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:14 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:14 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:14 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:41:14 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:15 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:41:15 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:15 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:15 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:15 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [06/Dec/2025:19:41:16 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:16 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.107.4 - - [06/Dec/2025:19:41:16 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:16 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.107.4 - - [06/Dec/2025:19:41:16 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:16 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:17 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:17 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:17 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:17 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.107.4 - - [06/Dec/2025:19:41:17 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:17 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [06/Dec/2025:19:41:18 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:18 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:18 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:18 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:18 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:18 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:18 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:18 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:19 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:19 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.68.242.108 - - [06/Dec/2025:19:41:19 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:19 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:19 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:19 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:20 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:20 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:20 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:20 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:20 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:20 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:21 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.107.4 - - [06/Dec/2025:19:41:21 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:21 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:21 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:21 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:21 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:22 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:22 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:22 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:22 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:22 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:23 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.107.4 - - [06/Dec/2025:19:41:23 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:23 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:23 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:23 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:41:24 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:24 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:24 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:41:24 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:24 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:24 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:24 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:25 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:25 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:25 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:25 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:25 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:25 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:26 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:26 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:26 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:41:26 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:26 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:26 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:27 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:27 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:27 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:27 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.107.4 - - [06/Dec/2025:19:41:27 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:27 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:28 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:41:28 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:28 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:41:28 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.107.4 - - [06/Dec/2025:19:41:28 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:41:28 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:28 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:29 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:29 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:29 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:41:29 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:29 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:30 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:30 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:30 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:30 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:30 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.107.4 - - [06/Dec/2025:19:41:30 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:41:31 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:31 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:31 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:31 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:31 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:31 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:32 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:41:32 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:32 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:32 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:32 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:41:32 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:32 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:33 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:33 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:33 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:33 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:33 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:33 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:34 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:34 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:34 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:34 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:34 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:34 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:35 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:35 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:41:35 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:35 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:35 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:35 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:35 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:36 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:36 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:41:36 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:36 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:36 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:41:36 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:41:37 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:37 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:37 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:37 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:41:38 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:41:38 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:38 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:38 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:38 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:38 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:38 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:39 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [06/Dec/2025:19:41:39 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:39 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:39 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.107.4 - - [06/Dec/2025:19:41:39 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:39 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:41:39 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:40 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:40 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [06/Dec/2025:19:41:40 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:41:40 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:41 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [06/Dec/2025:19:41:41 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:41 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:41:41 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:41 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:41 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:41 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:42 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:42 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:41:42 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:42 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:42 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.107.4 - - [06/Dec/2025:19:41:42 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:43 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:43 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.107.4 - - [06/Dec/2025:19:41:43 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:43 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:43 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:43 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:41:44 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:44 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:41:44 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:44 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [06/Dec/2025:19:41:44 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:44 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:41:45 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:45 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [06/Dec/2025:19:41:45 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:45 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:45 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:41:45 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:46 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:41:46 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:46 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:41:46 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.107.4 - - [06/Dec/2025:19:41:46 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:46 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:41:47 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:41:47 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.107.4 - - [06/Dec/2025:19:41:47 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:47 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.107.4 - - [06/Dec/2025:19:41:47 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:47 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:47 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:48 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:41:48 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:48 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:48 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:48 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:48 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:48 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:49 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:49 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:49 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:49 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:49 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:41:50 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:41:50 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:50 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.107.4 - - [06/Dec/2025:19:41:50 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:50 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:50 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:41:50 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:50 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:51 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:51 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:41:51 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:51 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:51 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:51 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:52 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:52 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:52 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:52 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:52 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:41:52 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:53 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:53 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:53 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:53 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:53 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:53 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:54 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:54 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:54 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:54 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:54 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.107.4 - - [06/Dec/2025:19:41:54 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:54 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:55 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:55 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:41:55 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:41:55 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:55 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.107.4 - - [06/Dec/2025:19:41:55 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:56 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.107.4 - - [06/Dec/2025:19:41:56 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:56 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:56 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:41:56 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:56 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:41:56 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:57 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:57 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:57 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:57 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:41:57 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:57 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:58 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.107.4 - - [06/Dec/2025:19:41:58 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:58 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:41:58 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:58 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:41:58 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:41:59 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:59 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:41:59 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:59 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:59 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:41:59 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:41:59 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:41:59 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:00 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:00 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [06/Dec/2025:19:42:00 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:00 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:00 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:00 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:01 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:01 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:42:01 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:01 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:01 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:01 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:42:02 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:42:02 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:02 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:42:02 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:02 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:02 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:02 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:03 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:03 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:03 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [06/Dec/2025:19:42:03 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:03 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:03 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:04 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:04 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:04 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:42:04 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:04 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:04 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:05 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:05 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:05 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.107.4 - - [06/Dec/2025:19:42:05 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:05 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:05 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:06 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:06 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:06 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:06 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:06 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:06 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [06/Dec/2025:19:42:06 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:06 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:07 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:07 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:07 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:42:07 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:07 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:08 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:08 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:08 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:08 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:08 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:08 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:09 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:09 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:09 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:09 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [06/Dec/2025:19:42:09 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:09 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:10 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:10 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:42:10 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [06/Dec/2025:19:42:10 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:10 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:11 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:11 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:11 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:11 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:42:11 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:12 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:12 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:42:12 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:42:12 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.68.242.108 - - [06/Dec/2025:19:42:12 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:12 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:12 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:12 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:13 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:13 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:13 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:13 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:13 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:14 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:14 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:14 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:14 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:42:14 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:14 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:14 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.107.4 - - [06/Dec/2025:19:42:15 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:15 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:15 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:15 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:15 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:15 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:15 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:16 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:16 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:16 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:16 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:17 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:17 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:17 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:17 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:17 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:18 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:42:18 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:18 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:18 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:18 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:18 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:19 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:19 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:19 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:19 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:19 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:19 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:20 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:20 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:20 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:42:20 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:20 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:20 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:21 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [06/Dec/2025:19:42:21 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.107.4 - - [06/Dec/2025:19:42:21 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:21 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:21 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:21 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:21 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:42:22 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:22 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:22 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.107.4 - - [06/Dec/2025:19:42:22 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:22 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:22 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:23 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.107.4 - - [06/Dec/2025:19:42:23 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:23 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:23 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [06/Dec/2025:19:42:23 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:23 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:42:23 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:24 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:24 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:24 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.68.242.108 - - [06/Dec/2025:19:42:24 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:42:24 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:42:24 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:25 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:25 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:25 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:42:25 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:42:25 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:25 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:26 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:26 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:26 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.107.4 - - [06/Dec/2025:19:42:26 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:27 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:27 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:27 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:27 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:27 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:27 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:27 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:28 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:28 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:28 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:42:28 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:28 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:28 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:28 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:29 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:29 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [06/Dec/2025:19:42:29 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:29 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:29 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:29 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:30 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:42:30 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:30 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:30 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:30 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:30 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:31 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:31 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:31 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:31 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:31 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:31 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:31 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:31 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:32 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:32 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:32 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:32 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:32 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:32 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [06/Dec/2025:19:42:33 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:33 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:33 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:33 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:33 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:33 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:33 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:34 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:42:34 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:42:34 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:42:34 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:34 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:34 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:34 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:35 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:35 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:35 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:42:35 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:42:35 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:42:35 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [06/Dec/2025:19:42:35 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:36 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:36 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:36 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:42:36 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:36 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:37 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:37 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:37 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:37 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:37 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:37 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:42:37 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:38 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:38 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:42:38 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:42:38 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:38 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:42:38 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.107.4 - - [06/Dec/2025:19:42:39 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:39 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:39 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:42:39 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:39 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:39 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:40 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:40 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:40 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.107.4 - - [06/Dec/2025:19:42:40 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:40 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:40 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:40 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:40 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:41 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:41 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:41 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:41 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.68.242.108 - - [06/Dec/2025:19:42:41 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:41 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:42 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:42 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:42 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:42:42 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [06/Dec/2025:19:42:42 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.107.4 - - [06/Dec/2025:19:42:42 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:42 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:43 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:42:43 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:43 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:43 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:43 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:43 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:43 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:44 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:42:44 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.68.242.108 - - [06/Dec/2025:19:42:44 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:44 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:44 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:42:44 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:44 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:42:45 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:45 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:45 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:45 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:46 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:46 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:46 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:42:46 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:46 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:46 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:47 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:47 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:47 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:47 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.107.4 - - [06/Dec/2025:19:42:47 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:47 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:47 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:42:47 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:48 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:48 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:48 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:48 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:48 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.107.4 - - [06/Dec/2025:19:42:48 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:49 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:49 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:49 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:49 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:49 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:49 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:49 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:50 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:50 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:50 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:50 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:50 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:50 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:50 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:51 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:42:51 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:42:51 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:51 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:51 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:51 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:51 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:52 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:42:52 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:52 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:52 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:52 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:42:52 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.107.4 - - [06/Dec/2025:19:42:53 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:53 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:42:53 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [06/Dec/2025:19:42:53 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:53 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:42:53 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:53 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:54 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:54 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:42:54 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:54 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:54 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:54 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:42:54 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:55 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:55 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:55 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:42:55 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:42:55 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:56 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:56 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:56 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:42:56 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:56 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:42:56 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:56 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:57 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:57 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:57 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:42:57 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:57 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:57 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:42:58 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:42:58 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:58 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:58 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:42:58 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:58 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:59 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:42:59 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:59 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:42:59 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:42:59 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.107.4 - - [06/Dec/2025:19:42:59 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:43:00 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:00 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [06/Dec/2025:19:43:00 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:00 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:00 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:00 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:01 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:43:01 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:01 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:01 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:01 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:43:01 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:01 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:01 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:43:02 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:02 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:43:02 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:02 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.107.4 - - [06/Dec/2025:19:43:02 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [06/Dec/2025:19:43:02 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:43:03 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:43:03 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:03 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:03 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:03 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:03 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [06/Dec/2025:19:43:04 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:04 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:43:04 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:04 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:04 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:04 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.68.242.108 - - [06/Dec/2025:19:43:05 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:05 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:05 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:05 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:05 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:43:05 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:06 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:06 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:06 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:43:06 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:43:06 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:43:06 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:06 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:07 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:43:07 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:07 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:43:07 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:43:07 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:43:07 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:43:08 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:08 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:43:08 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.68.242.108 - - [06/Dec/2025:19:43:08 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:08 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:08 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:08 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:09 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:43:09 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:09 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:43:09 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:09 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:09 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [06/Dec/2025:19:43:09 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:43:10 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:43:10 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:10 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:10 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:43:10 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.107.4 - - [06/Dec/2025:19:43:10 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:11 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:43:11 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:11 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:11 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:43:11 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:11 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:11 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:43:12 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.107.4 - - [06/Dec/2025:19:43:12 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:12 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:12 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:43:12 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:43:13 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.107.4 - - [06/Dec/2025:19:43:13 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:13 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:13 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:13 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:13 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:13 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:14 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:43:14 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:14 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [06/Dec/2025:19:43:14 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:14 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:43:14 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:43:15 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:15 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:15 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:43:15 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:15 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:15 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:15 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.68.242.108 - - [06/Dec/2025:19:43:16 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:16 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:16 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:16 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:16 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:43:16 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.107.4 - - [06/Dec/2025:19:43:17 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:43:17 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:17 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.107.4 - - [06/Dec/2025:19:43:17 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:18 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:18 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [06/Dec/2025:19:43:18 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:18 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:18 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.107.4 - - [06/Dec/2025:19:43:18 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:18 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:18 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:43:19 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:43:19 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:19 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:19 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:19 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:19 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:43:20 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.107.4 - - [06/Dec/2025:19:43:20 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:43:20 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:43:20 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:20 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:21 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [06/Dec/2025:19:43:21 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:21 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:43:21 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:21 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:43:21 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:21 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:43:22 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:22 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:22 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:22 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:22 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.107.4 - - [06/Dec/2025:19:43:22 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:23 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:23 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:43:23 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:23 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:43:23 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:23 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:24 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:24 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [06/Dec/2025:19:43:24 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:24 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:24 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:43:24 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:43:25 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:43:25 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:25 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:25 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:25 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:25 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:25 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.107.4 - - [06/Dec/2025:19:43:26 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:26 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:26 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:26 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:26 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:26 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:27 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [06/Dec/2025:19:43:27 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:27 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:27 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:27 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:27 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [06/Dec/2025:19:43:28 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:28 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:43:28 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:28 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:28 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:28 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:29 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.107.4 - - [06/Dec/2025:19:43:29 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:43:29 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.107.4 - - [06/Dec/2025:19:43:29 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:29 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:29 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:29 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.107.4 - - [06/Dec/2025:19:43:29 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [06/Dec/2025:19:43:30 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.107.4 - - [06/Dec/2025:19:43:30 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:30 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.107.4 - - [06/Dec/2025:19:43:30 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [06/Dec/2025:19:43:30 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:30 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:31 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:31 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:31 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:31 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:31 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:31 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:32 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:32 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:32 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:32 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.107.4 - - [06/Dec/2025:19:43:32 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [06/Dec/2025:19:43:32 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.107.4 - - [06/Dec/2025:19:43:32 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [06/Dec/2025:19:43:33 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:34 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [06/Dec/2025:19:43:34 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:34 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:43:34 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:34 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:34 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:34 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:43:35 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:43:35 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:35 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:35 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.188.16 - - [06/Dec/2025:19:43:35 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:35 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:35 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:43:35 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:43:36 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:36 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:43:36 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:36 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:43:36 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:36 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:36 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:43:36 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:43:36 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:37 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:37 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:43:37 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:37 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:43:37 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:37 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:37 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:43:38 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:43:38 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:43:38 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:43:38 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:43:38 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:43:38 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.188.16 - - [06/Dec/2025:19:43:38 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:39 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:39 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:43:39 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:39 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:43:39 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:39 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:40 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:43:40 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:43:40 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:40 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:40 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:41 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:41 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:41 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:43:41 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:41 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.188.16 - - [06/Dec/2025:19:43:41 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:41 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:42 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:42 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:42 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:43:42 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:43:42 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:43:42 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:42 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:43 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:43:43 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:43:43 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:43 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:43 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:43:43 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:43:44 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:43:44 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:43:44 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:44 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:43:44 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:43:44 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:45 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:43:45 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:45 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:43:45 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [06/Dec/2025:19:43:45 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:45 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:46 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:46 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:43:46 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:43:46 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:43:46 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:43:46 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:47 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:47 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:47 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:43:47 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:43:47 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:47 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:48 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:43:48 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:48 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:48 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:43:48 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:48 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:49 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:49 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:43:49 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:43:49 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:49 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:50 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:50 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:50 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:50 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:50 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:43:50 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:51 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:51 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:43:51 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:43:51 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:43:51 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [06/Dec/2025:19:43:52 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:43:52 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:43:52 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:52 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:43:52 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:53 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:43:53 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:53 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:53 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:43:53 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:43:53 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:54 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:54 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:43:54 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [06/Dec/2025:19:43:54 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:43:54 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:54 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:43:54 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:55 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:55 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [06/Dec/2025:19:43:55 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:55 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:55 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:55 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:56 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:56 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:56 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:56 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:43:56 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:57 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:57 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:43:57 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:43:57 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:57 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:57 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [06/Dec/2025:19:43:58 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:58 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:58 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:43:58 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:58 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:58 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:59 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.188.16 - - [06/Dec/2025:19:43:59 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:43:59 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:59 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.188.16 - - [06/Dec/2025:19:43:59 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:43:59 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:44:00 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:00 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:00 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:44:00 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:44:00 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:01 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:01 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:01 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:01 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:44:01 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:01 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:44:02 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:02 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:02 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:02 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:02 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:02 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:03 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:44:03 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:44:03 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:03 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:03 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:03 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:44:03 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:04 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:04 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:04 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:04 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [06/Dec/2025:19:44:04 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:04 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:44:05 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:05 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [06/Dec/2025:19:44:05 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:05 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:05 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:44:05 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:06 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:44:06 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:06 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:44:06 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:06 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:06 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:06 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:07 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:07 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.188.16 - - [06/Dec/2025:19:44:07 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:44:07 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:07 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:08 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:08 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:08 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:08 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:44:08 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:44:08 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:44:09 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:44:09 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:09 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:44:09 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:09 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:09 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:44:10 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:10 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:10 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:10 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:10 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:10 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:11 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:11 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:44:11 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:11 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:11 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:11 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:12 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:44:12 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:12 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:12 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:12 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:12 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:13 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:13 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:13 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:13 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:13 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:14 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:14 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:14 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:14 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:14 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:44:14 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:44:15 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:15 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:15 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:15 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:15 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:44:16 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:16 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:44:16 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:16 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:44:16 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:17 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:17 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:17 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:17 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:17 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:17 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:17 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:18 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:18 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:44:18 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:18 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:18 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:19 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:19 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:19 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:19 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:19 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:19 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:20 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:20 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:44:20 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:20 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [06/Dec/2025:19:44:20 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:20 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:21 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:21 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:44:21 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:21 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [06/Dec/2025:19:44:21 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:21 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [06/Dec/2025:19:44:21 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:22 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:22 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:22 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:22 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:44:22 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:23 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:23 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:23 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:44:23 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:23 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:23 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:44:23 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:44:24 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:24 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:24 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:44:24 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:24 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:24 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:25 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:44:25 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:25 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:25 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:25 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:44:26 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:26 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:26 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:44:26 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:26 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:26 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:26 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:27 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:44:27 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:27 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:44:27 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:27 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:27 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:28 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:28 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:44:28 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:28 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:28 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:29 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:29 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:29 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:44:29 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:29 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:29 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:29 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:30 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:30 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:30 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:44:30 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:30 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:31 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:31 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:31 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:31 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:31 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:31 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:32 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:32 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:44:32 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:32 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:44:32 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:32 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:33 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:33 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:44:33 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:33 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:33 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:33 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:33 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:34 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:34 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:34 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:34 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:34 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.188.16 - - [06/Dec/2025:19:44:34 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:35 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:44:35 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:35 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:44:35 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:35 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:35 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:44:36 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:36 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:36 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:36 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:44:36 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:44:36 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:36 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:37 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:37 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:37 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:37 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:37 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:37 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:38 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:38 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:38 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:44:38 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:38 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:38 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:39 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.188.16 - - [06/Dec/2025:19:44:39 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:39 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:39 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:44:39 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:40 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [06/Dec/2025:19:44:40 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:40 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:40 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:44:40 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:41 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:41 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:41 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:44:41 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:41 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:44:41 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:44:42 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:42 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:42 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:42 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:42 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:44:43 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:44:43 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:44:43 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:44:43 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:43 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:44:43 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:44:43 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:44 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:44:44 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:44 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:44 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:44 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:44 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:45 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:45 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:45 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:45 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:45 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:45 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:46 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:46 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:44:46 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:44:46 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:46 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:44:46 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:46 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:47 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:44:47 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:47 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:47 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:47 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:48 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:48 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:48 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:48 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:48 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:49 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:49 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:44:49 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:49 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:49 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:49 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:50 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:50 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:50 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:50 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:51 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:51 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:44:51 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:51 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:44:51 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:44:51 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:51 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [06/Dec/2025:19:44:52 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:52 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:52 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:52 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:52 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:53 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:53 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [06/Dec/2025:19:44:53 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:53 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:53 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:53 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [06/Dec/2025:19:44:53 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:54 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:54 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:54 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:44:54 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:54 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:54 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:55 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:55 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:55 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:55 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:55 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:55 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:44:56 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:56 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:44:56 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:44:56 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:44:56 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:44:56 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:44:57 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:57 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:57 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:57 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:57 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:57 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:58 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:58 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:58 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:58 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:58 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:58 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:59 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:44:59 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:59 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:44:59 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:44:59 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:44:59 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:45:00 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:00 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:00 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:00 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:00 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:01 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:01 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:01 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:01 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:45:01 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:01 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:45:02 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:02 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:02 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:02 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:02 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:45:03 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:03 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:45:03 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:03 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:03 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:03 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:04 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:04 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:45:04 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:04 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:04 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:45:04 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:45:04 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:45:05 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:05 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:05 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:06 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:06 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:06 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:45:06 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:06 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:06 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:06 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:07 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:07 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:07 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:45:07 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:07 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.188.16 - - [06/Dec/2025:19:45:08 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:08 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:08 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:08 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.188.16 - - [06/Dec/2025:19:45:08 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:08 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:08 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:09 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:09 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:45:09 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:09 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:09 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:09 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.188.16 - - [06/Dec/2025:19:45:10 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:10 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:45:10 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:10 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:10 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:10 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:11 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:11 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:45:11 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:11 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:11 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:11 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:45:12 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:12 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:12 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:12 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:13 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:13 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:45:13 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:13 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:13 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:13 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:13 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:45:14 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:14 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:14 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:45:14 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:14 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:14 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:45:15 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:15 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:15 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:15 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:15 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:15 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:16 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [06/Dec/2025:19:45:16 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:16 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:16 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:16 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:45:16 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:17 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:17 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:17 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:45:17 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:45:17 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:17 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:18 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:18 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:18 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:18 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:45:18 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:19 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:45:19 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:19 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:19 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:19 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:19 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:19 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:20 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:20 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:20 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [06/Dec/2025:19:45:20 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:20 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:20 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:21 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:21 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:21 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:21 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:21 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:21 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:21 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:22 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:22 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:22 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:22 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:22 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:22 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:45:23 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:23 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:45:23 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:23 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:23 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:23 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:23 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:24 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [06/Dec/2025:19:45:24 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:24 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:24 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:24 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:25 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.188.16 - - [06/Dec/2025:19:45:25 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:25 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:45:25 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:25 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:25 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:26 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:45:26 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:26 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:26 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:26 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:26 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:26 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:26 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:27 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [06/Dec/2025:19:45:27 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:27 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:27 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:27 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:28 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:28 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:28 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:28 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:45:28 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:28 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:29 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:29 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:29 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:29 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:29 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:29 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:45:30 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:30 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:30 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:30 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:30 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:30 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:45:30 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:31 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:31 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:31 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:31 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:31 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:32 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [06/Dec/2025:19:45:32 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:32 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:32 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:32 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:32 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:33 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:33 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:33 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:33 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [06/Dec/2025:19:45:33 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:45:33 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:33 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:45:34 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:34 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:34 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:45:34 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:34 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [06/Dec/2025:19:45:34 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:45:35 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:35 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:35 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:35 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:45:35 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:35 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:35 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:36 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:36 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:45:36 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:36 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:37 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:37 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [06/Dec/2025:19:45:37 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:37 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:37 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:37 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:38 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:38 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:38 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:38 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:38 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:45:39 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [06/Dec/2025:19:45:39 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:39 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:39 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:39 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:39 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:40 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:40 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:40 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:40 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:40 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:41 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:41 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:41 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:41 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:45:41 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:41 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:41 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:42 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:42 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:42 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:42 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:42 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:42 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:43 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:45:43 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:45:43 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:43 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:43 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:44 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:44 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:44 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:44 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:44 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:44 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:45 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:45 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:45 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:45 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:45 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:45 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.188.16 - - [06/Dec/2025:19:45:46 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:46 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:46 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:45:46 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:46 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:46 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:47 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:45:47 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.188.16 - - [06/Dec/2025:19:45:47 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:47 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:47 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:47 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:48 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:48 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:45:48 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:48 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:45:48 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:48 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:48 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:45:49 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:49 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:49 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:49 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:45:49 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:49 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:50 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:45:50 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:50 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:50 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:50 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:45:50 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:45:51 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:51 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:51 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:51 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:51 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:51 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:52 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:52 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:45:52 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:52 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:52 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:52 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:53 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:45:53 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:45:53 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:53 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:53 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:53 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:54 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:54 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:54 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:45:54 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:54 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:54 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:55 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:55 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:55 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:55 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:55 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:55 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:55 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:56 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:56 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:56 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:56 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:56 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:56 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:57 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:57 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:45:57 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:57 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:45:57 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [06/Dec/2025:19:45:57 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:58 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:45:58 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:45:58 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:45:58 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:58 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:58 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:45:58 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:45:59 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:59 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:45:59 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:45:59 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:45:59 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:46:00 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:00 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:00 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:00 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:00 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:46:00 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:01 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:46:01 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:46:01 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:46:01 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:01 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:02 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:02 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:02 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:02 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:02 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:02 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:03 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:03 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:03 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [06/Dec/2025:19:46:03 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:03 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:03 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:04 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:04 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:46:04 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:04 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:04 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:46:04 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:46:05 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:46:05 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:05 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:05 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:05 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:05 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:06 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:06 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:06 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.188.16 - - [06/Dec/2025:19:46:06 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:06 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:07 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:07 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:07 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:46:07 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:46:07 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:08 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:08 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:08 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:08 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:46:08 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:08 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:09 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:46:09 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:09 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:09 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:09 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:09 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:46:10 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:10 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:46:10 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:10 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [06/Dec/2025:19:46:10 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:46:10 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:10 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:11 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:11 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:46:11 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:11 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:11 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:11 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:12 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:12 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:12 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:46:12 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:12 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:12 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:13 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:13 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:46:13 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:46:13 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:13 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:13 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:14 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:14 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:14 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:46:14 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:14 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:14 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:14 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [06/Dec/2025:19:46:15 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:15 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [06/Dec/2025:19:46:15 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:15 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:15 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:15 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:16 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:46:16 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:46:16 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:16 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:16 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:46:16 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:16 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:16 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:17 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [06/Dec/2025:19:46:17 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:46:17 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [06/Dec/2025:19:46:17 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:46:18 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:18 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:18 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:18 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:18 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:18 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:18 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:46:18 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:46:19 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:46:19 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:19 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:19 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:46:19 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:20 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:46:20 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:20 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:20 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:20 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:20 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:21 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:21 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:21 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:46:21 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:21 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:22 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:46:22 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.188.16 - - [06/Dec/2025:19:46:22 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:22 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:23 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:23 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:46:23 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [06/Dec/2025:19:46:23 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:23 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:23 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:23 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:24 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:24 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:24 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:24 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:46:24 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:25 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:25 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:25 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:25 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:26 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:26 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:26 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:26 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:26 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:27 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:27 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:27 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:27 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:27 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:27 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:28 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:28 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:28 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:28 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:28 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:28 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:29 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:29 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:46:29 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:29 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:29 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:30 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:46:30 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:30 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:30 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:30 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:31 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:31 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:31 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:31 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:31 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:32 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:32 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:32 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:32 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:32 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:33 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:33 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:33 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:33 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.188.16 - - [06/Dec/2025:19:46:33 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:34 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:46:34 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:34 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:34 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.188.16 - - [06/Dec/2025:19:46:34 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:34 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:34 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:35 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:35 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:46:35 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:35 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:35 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:36 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:36 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:36 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:36 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:46:36 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:46:37 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:37 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:46:37 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:37 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:37 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:37 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:38 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:38 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:38 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:38 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:38 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:39 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:39 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:39 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:39 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:39 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.188.16 - - [06/Dec/2025:19:46:40 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:40 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:40 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:40 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:40 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:40 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:40 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:46:41 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:41 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:41 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:41 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:41 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:42 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:42 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [06/Dec/2025:19:46:42 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:42 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:42 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:42 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:43 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.188.16 - - [06/Dec/2025:19:46:43 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:43 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:43 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:43 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:43 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:44 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.188.16 - - [06/Dec/2025:19:46:44 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:44 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:44 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:44 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:44 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:45 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:45 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:45 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:46:45 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:45 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:46:46 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:46 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:46 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:46 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:46 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:46 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:46 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:46:47 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:47 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:47 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:47 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:47 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:47 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:48 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:48 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:48 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:48 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:48 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:49 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:46:49 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:49 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:49 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:49 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:46:49 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:49 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:46:50 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.188.16 - - [06/Dec/2025:19:46:50 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:50 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:46:50 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:50 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:50 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:51 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:51 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:51 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:46:51 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:51 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:52 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:46:52 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:52 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:52 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:52 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.188.16 - - [06/Dec/2025:19:46:52 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:53 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:53 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [06/Dec/2025:19:46:53 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:53 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:46:53 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:54 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:54 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:54 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [06/Dec/2025:19:46:54 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.188.16 - - [06/Dec/2025:19:46:54 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:54 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:55 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:46:55 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:55 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:55 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:55 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:55 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:55 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:56 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:56 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:56 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:56 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:57 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.188.16 - - [06/Dec/2025:19:46:57 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:57 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:57 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:57 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:57 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.188.16 - - [06/Dec/2025:19:46:57 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.188.16 - - [06/Dec/2025:19:46:58 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:46:58 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.188.16 - - [06/Dec/2025:19:46:58 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:58 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.188.16 - - [06/Dec/2025:19:46:58 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.188.16 - - [06/Dec/2025:19:46:59 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:59 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:46:59 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:46:59 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:00 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:00 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:00 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:47:01 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:47:01 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:01 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:47:02 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:02 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:47:02 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:03 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:03 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:03 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:47:04 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:04 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:04 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:05 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:05 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:06 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:47:06 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:47:06 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:47:06 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:07 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:07 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [06/Dec/2025:19:47:07 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:47:08 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:47:08 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:47:08 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [06/Dec/2025:19:47:09 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:09 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:47:10 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:47:10 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:47:10 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:47:10 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:47:11 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:11 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:47:12 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:12 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:47:12 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:13 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [06/Dec/2025:19:47:13 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:47:13 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:14 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:14 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:14 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:15 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:47:15 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:15 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [06/Dec/2025:19:47:16 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:16 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:16 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:17 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:17 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:18 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:47:18 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [06/Dec/2025:19:47:18 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:19 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [06/Dec/2025:19:47:19 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:20 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:20 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [06/Dec/2025:19:47:20 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:47:21 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:47:21 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:47:22 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:22 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [06/Dec/2025:19:47:23 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [06/Dec/2025:19:47:23 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:23 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:47:24 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:24 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:25 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [06/Dec/2025:19:47:25 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:26 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:26 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:27 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:27 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [06/Dec/2025:19:47:28 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [06/Dec/2025:19:47:28 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 108.162.249.114 - - [06/Dec/2025:19:49:41 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.8.79 - - [06/Dec/2025:21:56:06 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:06 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:07 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:07 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:07 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:08 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:08 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:08 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:09 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:09 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:09 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:10 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:10 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:10 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:11 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:11 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:11 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:12 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:12 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:12 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:13 +0100] "GET /EM.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:13 +0100] "GET /f-401.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:13 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:14 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:14 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:14 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:15 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:15 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:15 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:15 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:16 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:16 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:16 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:17 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:17 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:17 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:18 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:18 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:18 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:19 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:19 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:19 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:20 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:20 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:20 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:21 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:21 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:21 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:22 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:22 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:22 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:23 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:23 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:23 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:24 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:24 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:24 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:25 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:25 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:25 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:26 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:27 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:27 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:27 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:28 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:28 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:28 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:29 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:29 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:29 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:30 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:30 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:30 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:31 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:31 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:31 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:31 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:32 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:32 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:32 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:33 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:33 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:33 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:34 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:34 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:34 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:34 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:35 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:35 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:35 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:36 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:36 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:36 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:37 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:37 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:37 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:37 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:38 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:38 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:39 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:39 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:39 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:40 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:40 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:40 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:41 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:41 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:41 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:42 +0100] "GET /juuuu.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:42 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:42 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:43 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:43 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:43 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:44 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:44 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:44 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:45 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:45 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:45 +0100] "GET /wp-freya.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:46 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:46 +0100] "GET /2eaa2.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:46 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:47 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:47 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:47 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:48 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:48 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:48 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:49 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:49 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:49 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:50 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:50 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:50 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:51 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:51 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:51 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:52 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:52 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:52 +0100] "GET /php.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:53 +0100] "GET /ac.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:53 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:53 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:54 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:54 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:54 +0100] "GET /xaz.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:55 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:55 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:55 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [06/Dec/2025:21:56:56 +0100] "GET /wtz.php HTTP/1.1" 301 162 "-" "-" 172.64.223.6 - - [06/Dec/2025:22:48:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.22.1.198 - - [06/Dec/2025:23:39:45 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.71.23.18 - - [06/Dec/2025:23:39:45 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 108.162.237.172 - - [07/Dec/2025:00:10:30 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 108.162.238.57 - - [07/Dec/2025:00:10:30 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 162.158.118.244 - - [07/Dec/2025:00:28:15 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:17 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:17 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:18 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:18 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:18 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:19 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:19 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:19 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:20 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:20 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:20 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:21 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:21 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:21 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:22 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:22 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:22 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:23 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:23 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:23 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:24 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:24 +0100] "GET /mini HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:24 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:25 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:25 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:25 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:26 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:26 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [07/Dec/2025:00:28:26 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [07/Dec/2025:00:28:27 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:27 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:27 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:28 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:28 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:28 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:29 +0100] "GET /images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:29 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:29 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:30 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:30 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:30 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:30 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:31 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:31 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [07/Dec/2025:00:28:31 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:32 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:32 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:32 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:33 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:33 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:33 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [07/Dec/2025:00:28:34 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:34 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:34 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:35 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:35 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:35 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [07/Dec/2025:00:28:36 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:36 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:36 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:37 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:37 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:37 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:38 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:38 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:38 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:39 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [07/Dec/2025:00:28:39 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:39 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:40 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:40 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:40 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:41 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:41 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:41 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:42 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:42 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:42 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:43 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [07/Dec/2025:00:28:43 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:43 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:44 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:44 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:44 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:45 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:45 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:45 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:46 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:46 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:46 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:47 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:47 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:47 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:48 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:48 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:48 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:49 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:49 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:49 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:50 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:50 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:50 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:51 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:51 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:51 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:52 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:52 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:52 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:53 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:53 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:53 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:54 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:54 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:54 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [07/Dec/2025:00:28:55 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:55 +0100] "GET /x.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [07/Dec/2025:00:28:55 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.50.33 - - [07/Dec/2025:02:04:33 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.70.50.135 - - [07/Dec/2025:02:04:34 +0100] "GET /images/pronat/MonMay712181520189335.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.69.166.66 - - [07/Dec/2025:02:57:16 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:17 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:17 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:18 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:18 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:19 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [07/Dec/2025:02:57:19 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:20 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:20 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:21 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:21 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:22 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:22 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [07/Dec/2025:02:57:22 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:23 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:23 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:24 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:24 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:25 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:25 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:26 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:26 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:27 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:27 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:28 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:28 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:28 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:29 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:29 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:30 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:30 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:31 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:31 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:32 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:32 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:33 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:33 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:33 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:34 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:34 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:35 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:35 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:36 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:36 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:37 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:37 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:38 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:38 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:38 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:39 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:39 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:40 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:41 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:41 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:41 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:42 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:42 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:43 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:43 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:44 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:44 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:45 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:45 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:46 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:46 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:47 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [07/Dec/2025:02:57:47 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:47 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:48 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:48 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:49 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:49 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [07/Dec/2025:02:57:50 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:50 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:51 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:51 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:52 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:52 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:53 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [07/Dec/2025:02:57:53 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:54 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:54 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:55 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:55 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:55 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:56 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:56 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:57 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:57 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:58 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:57:58 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:59 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:57:59 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:00 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:00 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:00 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:58:01 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:58:01 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:58:02 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:58:02 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:03 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:03 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:04 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:04 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:58:05 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:05 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:06 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:06 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:06 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:07 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:58:07 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:08 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:58:08 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [07/Dec/2025:02:58:09 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:09 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:10 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:10 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [07/Dec/2025:02:58:11 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.111 - - [07/Dec/2025:03:52:53 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.223.111 - - [07/Dec/2025:03:54:32 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:19 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [07/Dec/2025:06:26:20 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [07/Dec/2025:06:26:20 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.111.8 - - [07/Dec/2025:06:26:21 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [07/Dec/2025:06:26:21 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.111.8 - - [07/Dec/2025:06:26:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [07/Dec/2025:06:26:22 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [07/Dec/2025:06:26:22 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.111.8 - - [07/Dec/2025:06:26:23 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.111.8 - - [07/Dec/2025:06:26:23 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [07/Dec/2025:06:26:24 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:24 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:24 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:25 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:25 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:26 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:26 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:26 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:27 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:27 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:28 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:28 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:29 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:29 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:29 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:30 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:30 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:31 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:31 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:31 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:32 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:32 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:33 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:33 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:33 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:34 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:34 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:34 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:35 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:35 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:36 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:36 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [07/Dec/2025:06:26:36 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:37 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:37 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:38 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:38 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:38 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:39 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:39 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:40 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:40 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:40 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:41 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:41 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:42 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:42 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:43 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:43 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:43 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:44 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:44 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:45 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:45 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:45 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:46 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:46 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:47 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:47 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:47 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:48 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:48 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:49 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:49 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:49 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:50 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:50 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:51 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:51 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:51 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:52 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:52 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:53 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:53 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [07/Dec/2025:06:26:53 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:54 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:54 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:55 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:55 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:55 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:56 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:56 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:57 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:57 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:58 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [07/Dec/2025:06:26:58 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:58 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:59 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:26:59 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:26:59 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [07/Dec/2025:06:27:00 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:27:00 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:27:01 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:27:01 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:27:01 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:27:02 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:27:02 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:27:03 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [07/Dec/2025:06:27:03 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:27:03 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:27:04 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:27:04 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:27:05 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:27:05 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:27:05 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [07/Dec/2025:06:27:06 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [07/Dec/2025:06:27:06 +0100] "GET /x.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [07/Dec/2025:06:27:07 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:31 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:32 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:32 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:33 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:33 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:33 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:33 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:34 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:34 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:34 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:35 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:35 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:35 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:36 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:36 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:36 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:36 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:37 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:37 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:37 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:38 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:38 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:38 +0100] "GET /mini HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:39 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:39 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:39 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:40 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:40 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:40 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:41 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:41 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:41 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.49.228 - - [07/Dec/2025:08:18:42 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:42 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:42 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:43 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:43 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:43 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:43 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:44 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:44 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:44 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:45 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:45 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:45 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:46 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:46 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:46 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:47 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:47 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:47 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:48 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:48 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:48 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:49 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:49 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:49 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:50 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:50 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:50 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:50 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:51 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:51 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:51 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:52 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.49.228 - - [07/Dec/2025:08:18:52 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:52 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:53 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.49.228 - - [07/Dec/2025:08:18:53 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:53 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:54 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:54 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:54 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:55 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:55 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:55 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:56 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:56 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:56 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:57 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:57 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:57 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:58 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:58 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:58 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.49.228 - - [07/Dec/2025:08:18:58 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:18:59 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:59 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:18:59 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:00 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:00 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:00 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:19:01 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:19:01 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:01 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.49.228 - - [07/Dec/2025:08:19:02 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.49.228 - - [07/Dec/2025:08:19:02 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:02 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:19:03 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:19:03 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:19:03 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:04 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.49.228 - - [07/Dec/2025:08:19:04 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:04 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.49.228 - - [07/Dec/2025:08:19:05 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:05 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:19:05 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:06 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:06 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:06 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:07 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:07 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:07 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:08 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:19:08 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.228 - - [07/Dec/2025:08:19:08 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:19:09 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.49.228 - - [07/Dec/2025:08:19:09 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.138.49 - - [07/Dec/2025:08:46:54 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.110.68 - - [07/Dec/2025:09:07:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3; rv:109.0) Gecko/20100101 Firefox/122.0" 172.71.95.130 - - [07/Dec/2025:09:07:46 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.246.101 - - [07/Dec/2025:09:07:47 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121." 172.71.164.111 - - [07/Dec/2025:09:07:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.3" 172.71.144.97 - - [07/Dec/2025:09:07:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/122.0" 162.159.110.3 - - [07/Dec/2025:09:08:39 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 162.158.94.201 - - [07/Dec/2025:09:08:41 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3; rv:109.0) Gecko/20100101 Firefox/122.0" 172.71.148.156 - - [07/Dec/2025:09:08:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/120.0.2210.144" 172.70.248.60 - - [07/Dec/2025:09:08:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.68.0.196 - - [07/Dec/2025:09:09:12 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.164.92 - - [07/Dec/2025:09:09:15 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.68.0.196 - - [07/Dec/2025:09:09:15 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.172.53 - - [07/Dec/2025:09:09:18 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121." 172.71.166.32 - - [07/Dec/2025:09:09:32 +0100] "GET / HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 104.23.239.85 - - [07/Dec/2025:09:09:40 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.68.195.211 - - [07/Dec/2025:09:09:40 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 172.68.218.158 - - [07/Dec/2025:09:10:36 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.148.123 - - [07/Dec/2025:09:10:38 +0100] "HEAD /RrethNesh.php?post_id=1234 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.82 Safari/537.36" 172.71.148.123 - - [07/Dec/2025:09:10:41 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121." 172.71.148.122 - - [07/Dec/2025:09:10:41 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 162.158.94.201 - - [07/Dec/2025:09:11:42 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.82 Safari/537.36" 172.70.248.60 - - [07/Dec/2025:09:11:42 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0." 172.70.94.125 - - [07/Dec/2025:09:11:59 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 162.158.94.201 - - [07/Dec/2025:09:12:01 +0100] "HEAD /RrethNesh.php?post_id=1234 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.70.216.169 - - [07/Dec/2025:09:12:43 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 162.158.110.68 - - [07/Dec/2025:09:12:43 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3" 162.158.110.69 - - [07/Dec/2025:09:12:43 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/120.0.2210.144" 162.158.134.181 - - [07/Dec/2025:09:12:51 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.148.123 - - [07/Dec/2025:09:12:52 +0100] "HEAD /Kontakt.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 OPR/106.0.0.0" 172.70.216.169 - - [07/Dec/2025:09:13:00 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.68.195.211 - - [07/Dec/2025:09:13:06 +0100] "HEAD /Kontakt.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:115.0) Gecko/20100101 Firefox/115.0" 162.158.216.21 - - [07/Dec/2025:09:13:23 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.172.20 - - [07/Dec/2025:09:13:24 +0100] "HEAD /RrethNesh.php?post_id=1234 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 162.158.87.61 - - [07/Dec/2025:09:13:45 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3; rv:109.0) Gecko/20100101 Firefox/122.0" 162.158.110.68 - - [07/Dec/2025:09:14:46 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.175 Safari/537.36" 104.23.223.110 - - [07/Dec/2025:09:14:46 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 162.158.110.68 - - [07/Dec/2025:09:14:47 +0100] "HEAD /index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:109.0) Gecko/20100101 Firefox/122.0" 172.64.215.12 - - [07/Dec/2025:09:15:16 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.69.40.138 - - [07/Dec/2025:09:15:17 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.148.123 - - [07/Dec/2025:09:15:18 +0100] "HEAD /index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418." 172.68.195.211 - - [07/Dec/2025:09:15:21 +0100] "HEAD /RrethNesh.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3; rv:109.0) Gecko/20100101 Firefox/122.0" 162.158.110.68 - - [07/Dec/2025:09:15:47 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.3" 172.68.195.211 - - [07/Dec/2025:09:15:47 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:115.0) Gecko/20100101 Firefox/115.0" 172.69.135.24 - - [07/Dec/2025:09:16:40 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.68.195.211 - - [07/Dec/2025:09:16:41 +0100] "HEAD /RrethNesh.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/122.0" 172.70.240.205 - - [07/Dec/2025:09:16:47 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3; rv:109.0) Gecko/20100101 Firefox/122.0" 104.23.172.11 - - [07/Dec/2025:09:17:00 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 162.158.94.201 - - [07/Dec/2025:09:17:01 +0100] "HEAD /index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.71.246.101 - - [07/Dec/2025:09:17:19 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.148.123 - - [07/Dec/2025:09:17:20 +0100] "HEAD /RrethNesh.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 OPR/70.0.3728.71" 172.70.248.61 - - [07/Dec/2025:09:17:48 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.52.167 - - [07/Dec/2025:09:18:42 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.71.172.20 - - [07/Dec/2025:09:18:44 +0100] "HEAD /RrethNesh.php?post_id=1234 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/122.0" 162.158.94.200 - - [07/Dec/2025:09:18:49 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.64.223.7 - - [07/Dec/2025:09:18:58 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.70.240.205 - - [07/Dec/2025:09:18:59 +0100] "HEAD /RrethNesh.php?post_id=1234 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3; rv:109.0) Gecko/20100101 Firefox/122.0" 172.69.214.15 - - [07/Dec/2025:09:20:08 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "ELinks/0.18.0 (textmode; Linux 5.8.0-63-generic x86_64; -)" 172.70.248.60 - - [07/Dec/2025:09:20:09 +0100] "HEAD /RrethNesh.php?post_id=1234 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/122.0" 172.71.151.185 - - [07/Dec/2025:09:22:05 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.151.65 - - [07/Dec/2025:09:24:49 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.70.94.172 - - [07/Dec/2025:09:30:19 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.232.80 - - [07/Dec/2025:10:56:33 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.118.133 - - [07/Dec/2025:10:56:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.188.16 - - [07/Dec/2025:11:05:56 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:05:57 +0100] "GET /dev1s.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:05:58 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:05:59 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:05:59 +0100] "GET /marijuana.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:00 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:00 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:01 +0100] "GET //gmo.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:01 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:02 +0100] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:02 +0100] "GET /wp-content/BypassBest.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:03 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:03 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:04 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:04 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:05 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:05 +0100] "GET /adminer.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:06 +0100] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:06 +0100] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:07 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:07 +0100] "GET /wp-includes/0.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:08 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:08 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:09 +0100] "GET /404.php?fm=true HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:09 +0100] "GET /i1.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:10 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:10 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:11 +0100] "GET /wp-admin/js/themes.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:12 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:12 +0100] "GET /mail.php? HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:13 +0100] "GET /.well-known/fm.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:13 +0100] "GET /17.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:14 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:15 +0100] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:15 +0100] "GET /wp-configs.php? HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:16 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:16 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:17 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:17 +0100] "GET /10.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:18 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:19 +0100] "GET /yu.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:19 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:20 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:20 +0100] "GET /124.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:21 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:21 +0100] "GET /q.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:22 +0100] "GET /123.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:23 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:23 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:24 +0100] "GET /uploads/multi.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:24 +0100] "GET /3.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:25 +0100] "GET /admin/uploads/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:25 +0100] "GET /sk.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:26 +0100] "GET /wp-crom.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:26 +0100] "GET /max.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:27 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:27 +0100] "GET /1100.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:28 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:29 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:29 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:30 +0100] "GET /up.php?x= HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:30 +0100] "GET /sim.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:31 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:31 +0100] "GET /oo.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:32 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:32 +0100] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:32 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:33 +0100] "GET /ll.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:33 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:34 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:34 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:35 +0100] "GET /wi.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:35 +0100] "GET /mms.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:36 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:36 +0100] "GET /v4.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:37 +0100] "GET /wp-mn.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:37 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:38 +0100] "GET /ALFA_DATA/index.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:38 +0100] "GET /lock360.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:39 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:39 +0100] "GET /po.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:40 +0100] "GET /zews.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:41 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:41 +0100] "GET /usage-file.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:50 +0100] "GET /Js.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:51 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:51 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:53 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:53 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "-" 172.70.188.16 - - [07/Dec/2025:11:06:54 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:20:50 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:20:54 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:20:55 +0100] "GET /blurbs18.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:20:55 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:20:56 +0100] "GET /ghh.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:20:56 +0100] "GET /bb5.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:20:57 +0100] "GET /ce.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:20:57 +0100] "GET /sdm.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:20:57 +0100] "GET /por.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:20:58 +0100] "GET /nux.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:20:58 +0100] "GET /IRI.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:20:59 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:20:59 +0100] "GET /85ohni.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:21:00 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 172.68.210.200 - - [07/Dec/2025:11:21:00 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:00 +0100] "GET /tyasd.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:01 +0100] "GET /wp-set.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:02 +0100] "GET /AMW.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:04 +0100] "GET /file15.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:05 +0100] "GET /waba.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:05 +0100] "GET /styll.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:05 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:06 +0100] "GET /cheko.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:06 +0100] "GET /xindex.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:07 +0100] "GET /priv8.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:07 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:08 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:08 +0100] "GET /t1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:09 +0100] "GET /sfcl.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:09 +0100] "GET /oysdxc.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:09 +0100] "GET /wp-admin/css/colors/sfcl.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:10 +0100] "GET /flap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:10 +0100] "GET /ycc.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:10 +0100] "GET /wp-includes/Requests/11.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [07/Dec/2025:11:21:11 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [07/Dec/2025:11:32:23 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.169 - - [07/Dec/2025:11:32:24 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.169 - - [07/Dec/2025:11:32:24 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.169 - - [07/Dec/2025:11:32:24 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.169 - - [07/Dec/2025:11:32:25 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.169 - - [07/Dec/2025:11:32:25 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.169 - - [07/Dec/2025:11:32:26 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.169 - - [07/Dec/2025:11:32:26 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.169 - - [07/Dec/2025:11:32:26 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.169 - - [07/Dec/2025:11:32:27 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.169 - - [07/Dec/2025:11:32:27 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.169 - - [07/Dec/2025:11:32:28 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.169 - - [07/Dec/2025:11:32:28 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:28 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:29 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:29 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:30 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:30 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:30 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:31 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:31 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:32 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:32 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:32 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:33 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:33 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:33 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:34 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:34 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:35 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:35 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:35 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:36 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:36 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:37 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:37 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:37 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:38 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:38 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:38 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:39 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:39 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:40 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:40 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:40 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:41 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:41 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:42 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:42 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:42 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:43 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:43 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:43 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:44 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:44 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:45 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:45 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:45 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:46 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:46 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:47 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:47 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:47 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:48 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:48 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:48 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:49 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:49 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:50 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:50 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:50 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:51 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:51 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:52 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:52 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:52 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:53 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:53 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:53 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:54 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:54 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:55 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:55 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:55 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:56 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:56 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:56 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:57 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:57 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:32:58 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:58 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:32:58 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:59 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:32:59 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:00 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:00 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:33:00 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:01 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:01 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:01 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:02 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:02 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:33:03 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:03 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:03 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:33:04 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:04 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:04 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:33:05 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:05 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:33:06 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:06 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [07/Dec/2025:11:33:06 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:07 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:07 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:08 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [07/Dec/2025:11:33:08 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [07/Dec/2025:11:33:08 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.110.69 - - [07/Dec/2025:12:56:21 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.195.107 - - [07/Dec/2025:14:03:07 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.163.202 - - [07/Dec/2025:14:54:28 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.32 - - [07/Dec/2025:14:54:28 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.32 - - [07/Dec/2025:14:54:28 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:29 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:29 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.32 - - [07/Dec/2025:14:54:29 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.32 - - [07/Dec/2025:14:54:29 +0100] "GET /text.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:29 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:30 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.32 - - [07/Dec/2025:14:54:30 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.32 - - [07/Dec/2025:14:54:30 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:30 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:31 +0100] "GET /contact.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:31 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.32 - - [07/Dec/2025:14:54:31 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:31 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.32 - - [07/Dec/2025:14:54:31 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.32 - - [07/Dec/2025:14:54:31 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:32 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.32 - - [07/Dec/2025:14:54:32 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:32 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.32 - - [07/Dec/2025:14:54:32 +0100] "GET /wp-admin/network/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.32 - - [07/Dec/2025:14:54:32 +0100] "GET /dashboard.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:33 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:33 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.32 - - [07/Dec/2025:14:54:33 +0100] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.32 - - [07/Dec/2025:14:54:33 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:33 +0100] "GET /wp-content/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.32 - - [07/Dec/2025:14:54:34 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.32 - - [07/Dec/2025:14:54:34 +0100] "GET /geju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.32 - - [07/Dec/2025:14:54:34 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:34 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:34 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:35 +0100] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.32 - - [07/Dec/2025:14:54:35 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.32 - - [07/Dec/2025:14:54:35 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.32 - - [07/Dec/2025:14:54:35 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:35 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:36 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:36 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:36 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:36 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:36 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:37 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:37 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:37 +0100] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:54:37 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:54:37 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:38 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:38 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:54:38 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:54:38 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:38 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:54:38 +0100] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:39 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:54:39 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:39 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:39 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:39 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:40 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:54:40 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:40 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:40 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:54:40 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:41 +0100] "GET /wp-Owl.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:54:41 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:54:41 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:54:41 +0100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:54:41 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:42 +0100] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:42 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:42 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:54:42 +0100] "GET /eagle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:42 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:43 +0100] "GET /lufix.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:54:43 +0100] "GET /ant.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:43 +0100] "GET /cux.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:54:43 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:43 +0100] "GET /wp-error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:54:43 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:54:44 +0100] "GET /send.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:54:44 +0100] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:54:44 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:54:44 +0100] "GET /admin.php?attempt=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:54:44 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:54:45 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:54:45 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:54:45 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:54:45 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:45 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:46 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:54:46 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:54:46 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:46 +0100] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:46 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:47 +0100] "GET /69.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:47 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:47 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:47 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:54:47 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:48 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:54:48 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:48 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:48 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:48 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:54:48 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:49 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:54:49 +0100] "GET /ty.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:54:49 +0100] "GET /upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:54:49 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:49 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:50 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:50 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:50 +0100] "GET /admin/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:50 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:50 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:51 +0100] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:51 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:54:51 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:51 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:51 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:54:52 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:54:52 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:52 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:54:52 +0100] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:54:53 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:53 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:53 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:53 +0100] "GET /profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:53 +0100] "GET /users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:54 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:54:54 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:54 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:54 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:54:54 +0100] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:54:55 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:54:55 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:55 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:55 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:55 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:56 +0100] "GET /faiy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:56 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:56 +0100] "GET /php8.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:56 +0100] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:54:56 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:57 +0100] "GET /akp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:57 +0100] "GET /wp-includes/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:54:57 +0100] "GET /u.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:57 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:57 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:58 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:54:58 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:58 +0100] "GET /wp-info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:58 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:54:58 +0100] "GET /defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:59 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:59 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:54:59 +0100] "GET /packed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:54:59 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:54:59 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:00 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:00 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:00 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:00 +0100] "GET /cgi-bin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:00 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:01 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:01 +0100] "GET /wp-admin/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:01 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:01 +0100] "GET /leaf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:01 +0100] "GET /xBrain.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [07/Dec/2025:14:55:02 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:02 +0100] "GET /wp-content/themes/twentytwentythree/styles/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:02 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:02 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:02 +0100] "GET /akc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:03 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:03 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:03 +0100] "GET /options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:03 +0100] "GET /wp-admin/css/colors/ectoplasm/my1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:03 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:04 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:04 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:04 +0100] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:04 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:04 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:05 +0100] "GET /admin/cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:05 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:55:05 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:05 +0100] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:05 +0100] "GET /admin/resources/dummy/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:05 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:06 +0100] "GET /shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:06 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:06 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:06 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:06 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:07 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:55:07 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:07 +0100] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:07 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:07 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:08 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:08 +0100] "GET /load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:08 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:08 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:08 +0100] "GET /xc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:08 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:09 +0100] "GET /gawean.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:55:09 +0100] "GET /past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:09 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:09 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:09 +0100] "GET /wp-includes/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:55:10 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:55:10 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:10 +0100] "GET /WSO.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:10 +0100] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:10 +0100] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:11 +0100] "GET /sts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:11 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:11 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:11 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:11 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:12 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:12 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:55:12 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:12 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:12 +0100] "GET /system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:12 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:13 +0100] "GET /file-manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [07/Dec/2025:14:55:13 +0100] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:13 +0100] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:13 +0100] "GET /wp-includes/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:13 +0100] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:14 +0100] "GET /f.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:14 +0100] "GET /wp-admin/maint/users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:55:14 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:14 +0100] "GET /ja.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:14 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:15 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:15 +0100] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:15 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:15 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:15 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:16 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:55:16 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:55:16 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:16 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:16 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:16 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:17 +0100] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:17 +0100] "GET /wp-admin.phpdiegun.com/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:17 +0100] "GET /xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:17 +0100] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:17 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:18 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:18 +0100] "GET /layout.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:18 +0100] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:55:18 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:18 +0100] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:19 +0100] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:19 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:19 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:19 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:19 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:19 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:20 +0100] "GET /wp-includes/Text/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:20 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:20 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:55:20 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:20 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:21 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:55:21 +0100] "GET /leafmailer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:21 +0100] "GET /image-gallery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:21 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:21 +0100] "GET /file.php?fm=true HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:55:22 +0100] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:55:22 +0100] "GET /about.php?525 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:22 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:22 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:22 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:23 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:23 +0100] "GET /admin/WebService/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:23 +0100] "GET /baxa1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:23 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:23 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:24 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:24 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:24 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:24 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:24 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:24 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:25 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:25 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:25 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:25 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:25 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:26 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:26 +0100] "GET /annt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:26 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:26 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:26 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:27 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:27 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:27 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:55:27 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:55:27 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:28 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:28 +0100] "GET /man.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:28 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:55:28 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:28 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:55:28 +0100] "GET /images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:29 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:29 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:29 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:29 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:29 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [07/Dec/2025:14:55:30 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:30 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:30 +0100] "GET /item.php/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:30 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:31 +0100] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:31 +0100] "GET /dz.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:31 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:31 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:31 +0100] "GET /wp-admin/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:32 +0100] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:32 +0100] "GET /bengi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:32 +0100] "GET /wp-admin/custom-plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:55:32 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:32 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:33 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:33 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:33 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:33 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:33 +0100] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:34 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:34 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:34 +0100] "GET /plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:55:34 +0100] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:34 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:35 +0100] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:35 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:55:35 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:55:35 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:35 +0100] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:35 +0100] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:36 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:36 +0100] "GET /sb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:36 +0100] "GET /BenX/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:36 +0100] "GET /22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:36 +0100] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:37 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:37 +0100] "GET /wp-content/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:37 +0100] "GET /shx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:37 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:55:37 +0100] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:38 +0100] "GET /wp-content/plugins/secure-fortress/avdb_3f7a1921c1e2b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:38 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:38 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:38 +0100] "GET /admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:55:38 +0100] "GET /mailer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:39 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:39 +0100] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:39 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:39 +0100] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:39 +0100] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:40 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:40 +0100] "GET /wp-content/themes/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:40 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:40 +0100] "GET /rss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:40 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:40 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:41 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:55:41 +0100] "GET /flywheel.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:41 +0100] "GET /xxx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:41 +0100] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:41 +0100] "GET /wp-admin/users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:42 +0100] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:42 +0100] "GET /help.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:42 +0100] "GET /man.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:42 +0100] "GET /wp-admin/29rc7ExgS6p.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:42 +0100] "GET /www.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:43 +0100] "GET /admin/include/student.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:55:43 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:43 +0100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:43 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:43 +0100] "GET /wp-logs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:44 +0100] "GET /wp-admin/css/OK.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:44 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:44 +0100] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:44 +0100] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:44 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:45 +0100] "GET /wp-includes/Requests/src/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:45 +0100] "GET /cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:45 +0100] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:45 +0100] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:45 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:45 +0100] "GET /st.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:55:46 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:46 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:46 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:46 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:46 +0100] "GET /wp-includes/fonts/class-wp-font-face.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:55:47 +0100] "GET /wp-admin/user/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:47 +0100] "GET /yanz.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:47 +0100] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:47 +0100] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [07/Dec/2025:14:55:47 +0100] "GET /MARIJUANA.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:48 +0100] "GET /wp-content/plugins/xc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:48 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:48 +0100] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:48 +0100] "GET /wp-includes/fonts/class-wp-font-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:48 +0100] "GET /wp-admin/css/go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:55:49 +0100] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:49 +0100] "GET /dash.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:49 +0100] "GET /wp-content/plugins/fix/custom-plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:55:49 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:49 +0100] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:49 +0100] "GET /bala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:50 +0100] "GET /wp-content/themes/twentytwenty/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:50 +0100] "GET /fm1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:50 +0100] "GET /he.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:50 +0100] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:50 +0100] "GET /updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:51 +0100] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:51 +0100] "GET /wp-admin/fw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:51 +0100] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:55:51 +0100] "GET /01.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:51 +0100] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:55:52 +0100] "GET /alfanew.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:52 +0100] "GET /leaf_mailer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:52 +0100] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:55:52 +0100] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:52 +0100] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:53 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:53 +0100] "GET /abe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:53 +0100] "GET /wp-content/themes/pridmag/j.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:53 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:53 +0100] "GET /wp-includes/fonts/class-wp-font-face-resolver.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:54 +0100] "GET /wp-includes/fonts/class-wp-font-utils.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:54 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:55:54 +0100] "GET /blog/fw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:55:54 +0100] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:54 +0100] "GET /.well-known/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:54 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:55 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:55:55 +0100] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:55 +0100] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:55:55 +0100] "GET /wp-content/themes/remv.php.INFECTED.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:55:55 +0100] "GET /cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:56 +0100] "GET /wordpress/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:55:56 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:55:56 +0100] "GET /wp-includes/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:55:56 +0100] "GET /alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:56 +0100] "GET /wp-includes/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:57 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:57 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:55:57 +0100] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:57 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:57 +0100] "GET /baxa1.phP8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:55:58 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:58 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:58 +0100] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:58 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:58 +0100] "GET /inputs.phpdunamisconcept.com.ng/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:55:59 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:59 +0100] "GET /wp-wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:59 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:55:59 +0100] "GET /assets/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:55:59 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:56:00 +0100] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:00 +0100] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:00 +0100] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:00 +0100] "GET /epinyins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:00 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:56:01 +0100] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [07/Dec/2025:14:56:01 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:56:01 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:01 +0100] "GET /admin/function.php/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:01 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:02 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:02 +0100] "GET /admin/resources/cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:02 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:02 +0100] "GET /favicon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:02 +0100] "GET /wp-includes/js/codemirror/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:03 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:03 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:03 +0100] "GET /wp-admin/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:03 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:03 +0100] "GET /fw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:56:04 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:04 +0100] "GET /contents.php/lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:04 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:56:04 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:56:04 +0100] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:05 +0100] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:56:05 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:05 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:05 +0100] "GET /wp-admin/fmadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:05 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:56:06 +0100] "GET /alfanew2.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:56:06 +0100] "GET /hi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:06 +0100] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:56:06 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:06 +0100] "GET /lf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:06 +0100] "GET /wp-config-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:07 +0100] "GET /wp/abe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:07 +0100] "GET /wp-includes/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:56:07 +0100] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:07 +0100] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:07 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:08 +0100] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:56:08 +0100] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:08 +0100] "GET /ynz.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:08 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:08 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:09 +0100] "GET /fox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:09 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:56:09 +0100] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:09 +0100] "GET /10.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:09 +0100] "GET /.well-known/wso112233.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:10 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:10 +0100] "GET /upload/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:10 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:10 +0100] "GET /t.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:10 +0100] "GET /about.php/wp-includes/Text/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:11 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:56:11 +0100] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:11 +0100] "GET /anj.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:11 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:11 +0100] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:11 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:56:12 +0100] "GET /worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:12 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:12 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:12 +0100] "GET /wp-includes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:12 +0100] "GET /vv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:13 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:13 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:13 +0100] "GET /randkeyword.PhP8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:13 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:13 +0100] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:14 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:56:14 +0100] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:56:14 +0100] "GET /wp-admin/maint/go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:14 +0100] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:56:14 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:15 +0100] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:15 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:15 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:15 +0100] "GET /wp-includes/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:15 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:16 +0100] "GET /o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:56:16 +0100] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:16 +0100] "GET /al.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:16 +0100] "GET /.well-known/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:16 +0100] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [07/Dec/2025:14:56:16 +0100] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:17 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:17 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:17 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:17 +0100] "GET /wp-admin/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:17 +0100] "GET /wp-includes/SimplePie/alfa-rex.php8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:56:18 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:18 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:56:18 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:18 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:18 +0100] "GET /server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:19 +0100] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:19 +0100] "GET /wp-crom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:56:19 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:19 +0100] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:19 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:20 +0100] "GET /asus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:20 +0100] "GET /ioxi01.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:20 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:20 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:20 +0100] "GET /wp-cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:20 +0100] "GET /.well-known/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:21 +0100] "GET /bb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:21 +0100] "GET /form.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:21 +0100] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:56:21 +0100] "GET /alex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:21 +0100] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:22 +0100] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:56:22 +0100] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:22 +0100] "GET /wp-includes/SimplePie/XML/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:22 +0100] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:22 +0100] "GET /h.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:23 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:23 +0100] "GET /0byte.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:23 +0100] "GET /up.php?x= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:23 +0100] "GET /.well-known/xoxo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:23 +0100] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:24 +0100] "GET /wp-admin/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:24 +0100] "GET /7.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:24 +0100] "GET /wp-content/themes/twentytwelve/css/alfa-rex.php8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:24 +0100] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:24 +0100] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:25 +0100] "GET /html_editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:25 +0100] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:25 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:56:25 +0100] "GET /wp-includes/Text/Diff/alfa-rex.php8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:25 +0100] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:25 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:26 +0100] "GET /ae.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:26 +0100] "GET /ws.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [07/Dec/2025:14:56:26 +0100] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:26 +0100] "GET /wp-admin/nciii.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:26 +0100] "GET /soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:27 +0100] "GET /.well-known/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:27 +0100] "GET /.well-known/link.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:27 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:27 +0100] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:27 +0100] "GET /bsrdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:28 +0100] "GET /uploads/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:28 +0100] "GET /berlin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:28 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:56:28 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:28 +0100] "GET /wp-includes/SimplePie/Decode/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:56:29 +0100] "GET /index/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:56:29 +0100] "GET /priv8.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:29 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:29 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:29 +0100] "GET /millo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:30 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:30 +0100] "GET /adminer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:56:30 +0100] "GET /.well-known/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:30 +0100] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:30 +0100] "GET /custom-plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:56:31 +0100] "GET /cron.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:56:31 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:31 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:31 +0100] "GET /meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:31 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:56:32 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:56:32 +0100] "GET /browse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:32 +0100] "GET /auth.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:32 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:32 +0100] "GET /files/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:33 +0100] "GET /cgyhj.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:56:33 +0100] "GET /gelay.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:56:33 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:33 +0100] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:33 +0100] "GET /lol.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:56:34 +0100] "GET /wp_wrong_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:34 +0100] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:34 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:34 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:34 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:56:35 +0100] "GET /index/function.php/wp-includes/Text/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:35 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:35 +0100] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:35 +0100] "GET /bu5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:35 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:35 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:36 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:36 +0100] "GET /wp-content/themes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:36 +0100] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:36 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:56:36 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:37 +0100] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:37 +0100] "GET /tdgdesr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:37 +0100] "GET /cgi-bin/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:37 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:37 +0100] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:38 +0100] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:38 +0100] "GET /wp-content/themes/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:38 +0100] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:38 +0100] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:38 +0100] "GET /9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:39 +0100] "GET /wp-admin/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:39 +0100] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:39 +0100] "GET /acp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:56:39 +0100] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:39 +0100] "GET /ad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:40 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:40 +0100] "GET /cong.phpprotectthekids-co.fireyourpestcompany.com/wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:56:40 +0100] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:56:40 +0100] "GET /xl.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:56:40 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:41 +0100] "GET /wp-content/plugins/fix/xc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:41 +0100] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Core32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:56:41 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:41 +0100] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:41 +0100] "GET /.well-known/pki-validation/dbform69.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:42 +0100] "GET /d.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:56:42 +0100] "GET /wp-includes/images/alfa-rex.php8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:42 +0100] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:42 +0100] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:42 +0100] "GET /wp-includes/unix.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:42 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:43 +0100] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:43 +0100] "GET /img/5/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:43 +0100] "GET /admin.php/wp-includes/Text/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:43 +0100] "GET /function/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:43 +0100] "GET /jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:44 +0100] "GET /owl.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:44 +0100] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:44 +0100] "GET /beence.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:44 +0100] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:44 +0100] "GET /wp-content/updraft/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:45 +0100] "GET /wp-content/themes/twentytwentythree/parts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.163.202 - - [07/Dec/2025:14:56:45 +0100] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:56:45 +0100] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:45 +0100] "GET /wp-content/themes/twentytwenty/alfa-rex.php8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:45 +0100] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:46 +0100] "GET /upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:46 +0100] "GET /wp-admin/maint/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:46 +0100] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:46 +0100] "GET /q.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:46 +0100] "GET /wp-includes/programa_apoyo_editoriales.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:47 +0100] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:47 +0100] "GET /wp-includes/bak.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:47 +0100] "GET /wp-includes/js/tinymce/skins/alfa-rex.php8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:56:47 +0100] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:47 +0100] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:48 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:56:48 +0100] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:56:48 +0100] "GET /wp-includes/Requests/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:48 +0100] "GET /wp-includes/Text/Diff/alfa-rex.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [07/Dec/2025:14:56:48 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:49 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:49 +0100] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:56:49 +0100] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:49 +0100] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:56:49 +0100] "GET /assets/images/niil.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:56:49 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:50 +0100] "GET /y.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:50 +0100] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:56:50 +0100] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:56:50 +0100] "GET /wp-includes/SimplePie/Decode/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:57:01 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:01 +0100] "GET /files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:01 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:01 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:01 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:01 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:02 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:02 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:02 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:02 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:02 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:03 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:03 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:03 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:03 +0100] "GET /assets/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:57:03 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:57:04 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:04 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:57:04 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:04 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:04 +0100] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:05 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:05 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:05 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:05 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:05 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:06 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:06 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:06 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:57:06 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:06 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:07 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:07 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:07 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:07 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:07 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:08 +0100] "GET /private/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:08 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:08 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:08 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:57:08 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:09 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:09 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:09 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:09 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:57:09 +0100] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:10 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:57:10 +0100] "GET /wp-content/up HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:10 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:10 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:10 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:10 +0100] "GET /php/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:57:11 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:11 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:57:11 +0100] "GET /plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:11 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:11 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:57:12 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:12 +0100] "GET /admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:12 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:12 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:12 +0100] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:57:13 +0100] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:13 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:13 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:57:13 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:13 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:14 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:14 +0100] "GET /upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:14 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:14 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:14 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:15 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:15 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:15 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:15 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:57:15 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:16 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:16 +0100] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:16 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:16 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:16 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:57:17 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:17 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:17 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:57:17 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:17 +0100] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:57:18 +0100] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:18 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:18 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:57:18 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:18 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:57:19 +0100] "GET /vendor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:19 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:19 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:19 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:19 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.163.202 - - [07/Dec/2025:14:57:20 +0100] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:20 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:20 +0100] "GET /tinyfilemanager HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:20 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:20 +0100] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:20 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:21 +0100] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:21 +0100] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:21 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:21 +0100] "GET /shop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:21 +0100] "GET /local/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:57:22 +0100] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:22 +0100] "GET /img/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:22 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:22 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:23 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.163.202 - - [07/Dec/2025:14:57:23 +0100] "GET /.well-known/pki-validation/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:23 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:23 +0100] "GET /Site/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:23 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:24 +0100] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:57:24 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:57:24 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.163.202 - - [07/Dec/2025:14:57:24 +0100] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:24 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:57:25 +0100] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:57:25 +0100] "GET /system/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:25 +0100] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:57:25 +0100] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.163.202 - - [07/Dec/2025:14:57:25 +0100] "GET /wp-content/languages/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:26 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:57:26 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:57:26 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:57:26 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:26 +0100] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:27 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:57:27 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:27 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:27 +0100] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:27 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:27 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:57:28 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:57:28 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:57:28 +0100] "GET /docs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:28 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:29 +0100] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:29 +0100] "GET /backup/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.163.202 - - [07/Dec/2025:14:57:29 +0100] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:29 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.163.202 - - [07/Dec/2025:14:57:29 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:30 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.163.202 - - [07/Dec/2025:14:57:30 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:30 +0100] "GET /aspera/faspex/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.163.202 - - [07/Dec/2025:14:57:30 +0100] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:30 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.163.202 - - [07/Dec/2025:14:57:31 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:31 +0100] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.163.202 - - [07/Dec/2025:14:57:31 +0100] "GET /wp-content HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:31 +0100] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:32 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:32 +0100] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.163.202 - - [07/Dec/2025:14:57:32 +0100] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:57:32 +0100] "GET /wp-content/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.163.202 - - [07/Dec/2025:14:57:32 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.163.202 - - [07/Dec/2025:14:57:33 +0100] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.163.202 - - [07/Dec/2025:14:57:33 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.183.69 - - [07/Dec/2025:16:03:24 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 104.23.221.111 - - [07/Dec/2025:16:03:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 172.71.95.129 - - [07/Dec/2025:16:43:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.95.96 - - [07/Dec/2025:16:43:57 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.41.23 - - [07/Dec/2025:17:21:10 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 162.158.42.157 - - [07/Dec/2025:17:21:10 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 162.158.42.157 - - [07/Dec/2025:17:21:11 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 162.158.42.157 - - [07/Dec/2025:17:21:11 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 162.158.42.157 - - [07/Dec/2025:17:21:11 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 162.158.42.157 - - [07/Dec/2025:17:21:11 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 162.158.42.157 - - [07/Dec/2025:17:21:11 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.68.2.86 - - [07/Dec/2025:17:27:58 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 172.68.2.86 - - [07/Dec/2025:17:27:58 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.68.2.86 - - [07/Dec/2025:17:27:59 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.68.2.86 - - [07/Dec/2025:17:27:59 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.2.86 - - [07/Dec/2025:17:27:59 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.2.86 - - [07/Dec/2025:17:27:59 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.68.2.86 - - [07/Dec/2025:17:27:59 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:02 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:02 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:03 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:03 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:03 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:04 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:04 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:04 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:04 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:05 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:05 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:05 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:05 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:06 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:06 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:06 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:06 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:07 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:07 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:07 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:08 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:08 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:08 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:08 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:09 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:09 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:09 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:09 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:10 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [07/Dec/2025:19:20:10 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [07/Dec/2025:19:20:10 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [07/Dec/2025:19:20:11 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:11 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:11 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:11 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:12 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:12 +0100] "GET /images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:12 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:12 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:13 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:13 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:13 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:13 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:14 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:14 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:14 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:15 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:15 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:15 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:15 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [07/Dec/2025:19:20:16 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:16 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:16 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:17 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:17 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:17 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:17 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:18 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:18 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:18 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:18 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:19 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:19 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:19 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:19 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:20 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:20 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:20 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:21 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:21 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:21 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:21 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:22 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:22 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:22 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [07/Dec/2025:19:20:22 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:23 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:23 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:23 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:23 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:24 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:24 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:24 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:25 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:25 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:25 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:25 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [07/Dec/2025:19:20:26 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:26 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:26 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:26 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:27 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:27 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:27 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:27 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:28 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:28 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [07/Dec/2025:19:20:28 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:28 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:29 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:29 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:29 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:30 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:30 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:30 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:30 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:31 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:31 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:31 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:32 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:32 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:32 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:32 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:33 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:33 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:33 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [07/Dec/2025:19:20:33 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [07/Dec/2025:19:20:34 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.103.56 - - [07/Dec/2025:22:15:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.70.50.87 - - [07/Dec/2025:22:15:13 +0100] "GET /images/pronat/MonMay712211520189682.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.64.223.6 - - [07/Dec/2025:22:40:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 197.234.242.182 - - [07/Dec/2025:23:49:43 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/605.1.15" 172.68.12.99 - - [07/Dec/2025:23:49:46 +0100] "GET /eng HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:18 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [08/Dec/2025:01:14:19 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [08/Dec/2025:01:14:19 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.139 - - [08/Dec/2025:01:14:20 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [08/Dec/2025:01:14:20 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.139 - - [08/Dec/2025:01:14:20 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [08/Dec/2025:01:14:21 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [08/Dec/2025:01:14:21 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:21 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:22 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:22 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:22 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:23 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:23 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:23 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [08/Dec/2025:01:14:24 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:24 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:24 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:25 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:25 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:25 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:26 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:26 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:26 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:27 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:27 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:27 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:28 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:28 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:28 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:29 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [08/Dec/2025:01:14:29 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:29 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:30 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:30 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:30 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:31 +0100] "GET /images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:31 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:31 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:32 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:32 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:32 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:33 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:33 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:33 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:34 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:34 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:34 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:35 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:35 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:35 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:35 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:36 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:36 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:36 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:37 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:37 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:37 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:38 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:38 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:38 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:39 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [08/Dec/2025:01:14:39 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:39 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:40 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:40 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:40 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:41 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [08/Dec/2025:01:14:41 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:41 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:42 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:42 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:42 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:43 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:43 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:43 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:43 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:44 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:44 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:44 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:45 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:45 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:45 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:46 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:46 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:46 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:47 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:47 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [08/Dec/2025:01:14:47 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:48 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:48 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:48 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:49 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:49 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:49 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:50 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:50 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:50 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:51 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:51 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:51 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:52 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:52 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:52 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:53 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:53 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:53 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:54 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:54 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:54 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:54 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:55 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:55 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:55 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:56 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [08/Dec/2025:01:14:56 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:56 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [08/Dec/2025:01:14:57 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.84 - - [08/Dec/2025:01:20:57 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 172.70.179.194 - - [08/Dec/2025:02:59:11 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.158.77 - - [08/Dec/2025:03:37:55 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 162.159.119.62 - - [08/Dec/2025:03:37:56 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:32:48 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.26 - - [08/Dec/2025:06:32:50 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.26 - - [08/Dec/2025:06:32:50 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.26 - - [08/Dec/2025:06:32:50 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.26 - - [08/Dec/2025:06:32:51 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.223.26 - - [08/Dec/2025:06:32:52 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:32:53 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:32:53 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:32:53 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:32:54 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:32:54 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:32:55 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:32:55 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:32:56 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:32:56 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:32:56 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:32:57 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:32:57 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.223.110 - - [08/Dec/2025:06:32:58 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:32:59 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:32:59 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:00 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:00 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:01 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:01 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:02 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:02 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:03 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:03 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:03 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:04 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:04 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:04 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:05 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:05 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:06 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:06 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:06 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:07 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:07 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:07 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:08 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:08 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:08 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:09 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:10 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.223.110 - - [08/Dec/2025:06:33:10 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:10 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:11 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:11 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:12 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:12 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:12 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:13 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:13 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:14 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:14 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:15 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:15 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:15 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:16 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:17 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:17 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:18 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.223.110 - - [08/Dec/2025:06:33:18 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:18 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:19 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:19 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:19 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:20 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:20 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:21 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:21 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:22 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:22 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:23 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:23 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:24 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:24 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:25 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:25 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:26 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:26 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:27 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:27 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:27 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.223.110 - - [08/Dec/2025:06:33:28 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:29 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:29 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:30 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:31 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:32 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:33 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:34 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:34 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:42 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:43 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:43 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:44 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:44 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:45 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:45 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:46 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:46 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:46 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:47 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:48 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:48 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:49 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:49 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:50 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:50 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.223.110 - - [08/Dec/2025:06:33:51 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:51 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:51 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:52 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [08/Dec/2025:06:33:52 +0100] "GET /x.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.110 - - [08/Dec/2025:06:33:54 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.221.110 - - [08/Dec/2025:06:44:07 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.221.110 - - [08/Dec/2025:06:45:12 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.94.173 - - [08/Dec/2025:07:52:25 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.159.113.37 - - [08/Dec/2025:09:41:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.23.162.13 - - [08/Dec/2025:10:40:21 +0100] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 172.68.225.196 - - [08/Dec/2025:10:44:00 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.219.7 - - [08/Dec/2025:10:44:01 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:01 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:02 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.7 - - [08/Dec/2025:10:44:02 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:02 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:03 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.7 - - [08/Dec/2025:10:44:03 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:03 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:04 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:04 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:04 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:05 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:05 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:05 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.7 - - [08/Dec/2025:10:44:06 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:06 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:06 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:07 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:07 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:08 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:08 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:08 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:09 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:09 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:09 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:10 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:10 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:10 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:11 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:11 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:12 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:12 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:12 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:13 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.225.196 - - [08/Dec/2025:10:44:13 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.225.196 - - [08/Dec/2025:10:44:13 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:14 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:14 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:14 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:15 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:15 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:15 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:16 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:16 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:16 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:17 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:17 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:18 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:18 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:18 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:19 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:19 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:19 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:20 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:20 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:20 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:21 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:21 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:21 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:22 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:22 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:22 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:23 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:23 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:24 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.225.196 - - [08/Dec/2025:10:44:24 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:24 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:25 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:25 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:25 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.225.196 - - [08/Dec/2025:10:44:26 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:26 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:26 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:27 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:27 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:27 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:28 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:28 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:28 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:29 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:29 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:30 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:30 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:30 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:31 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:31 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.225.196 - - [08/Dec/2025:10:44:31 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:32 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:32 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:32 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:33 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:33 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:33 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:34 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:34 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:35 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:35 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:35 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:36 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:36 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:36 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:37 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:37 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:37 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:38 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:38 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:39 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:39 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:40 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:40 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.225.196 - - [08/Dec/2025:10:44:40 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:41 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:41 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:42 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.225.196 - - [08/Dec/2025:10:44:42 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.196 - - [08/Dec/2025:10:44:42 +0100] "GET /x.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.225.196 - - [08/Dec/2025:10:44:43 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.156 - - [08/Dec/2025:11:45:51 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.71.242.159 - - [08/Dec/2025:17:08:42 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:45 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:08:46 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:47 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:48 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:48 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:48 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:49 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:08:50 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:52 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:53 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:55 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:57 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:57 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:58 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:59 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:08:59 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:08:59 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:01 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:02 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:03 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:04 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:04 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:04 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:09:04 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:05 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:05 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:05 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:07 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:08 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:09 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:10 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:10 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:12 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:12 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:09:13 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:13 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:14 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:14 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:15 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:15 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:17 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:17 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:17 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:18 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:19 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:20 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:21 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:22 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:22 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:23 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:23 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:24 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:24 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:25 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:25 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:26 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:27 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:27 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:28 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:28 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:29 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:30 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:31 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:33 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:34 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:35 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:35 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:37 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:37 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:37 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:38 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:09:40 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:09:40 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:40 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:09:41 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:41 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:41 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:41 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:42 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:09:43 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:43 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:46 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:47 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:47 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:48 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:49 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:50 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:50 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:09:51 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:52 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:53 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:53 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:54 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:54 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:55 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:56 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:57 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:58 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:58 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:09:59 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:59 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:09:59 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:00 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:01 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:16 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:16 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:17 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:17 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:17 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:18 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:18 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:18 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:20 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:20 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:20 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:21 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:21 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:22 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:23 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:23 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:23 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:24 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:25 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:25 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:25 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:28 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:28 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:29 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:29 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:30 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:32 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:32 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:32 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:33 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:34 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:34 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:10:34 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:36 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:37 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:38 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:39 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:40 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:41 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:41 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:41 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:10:42 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:10:42 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:43 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:44 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:46 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:46 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:47 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:48 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:49 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:49 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:50 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:51 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:51 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:51 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:52 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:53 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:54 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:55 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:55 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:57 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:57 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:57 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:57 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:58 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:10:58 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:58 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:10:59 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:00 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:01 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:01 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:01 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:02 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:02 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:11:03 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:03 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:04 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:11:04 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:11:05 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:06 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:06 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:06 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:06 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:07 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:07 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:07 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:08 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:08 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:08 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:09 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:10 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:10 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:10 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:11 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:11:11 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:13 +0100] "GET /system/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:13 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:14 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:14 +0100] "GET /files/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:16 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:17 +0100] "GET /include/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:17 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:18 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:19 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:21 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:23 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:24 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:24 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:24 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:26 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:27 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:28 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:28 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:29 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:31 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:31 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:32 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:32 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:32 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:33 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:33 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:34 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:34 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:35 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:35 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:35 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:36 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:36 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:11:37 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [08/Dec/2025:17:11:37 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:38 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:38 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:38 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:39 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:39 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:39 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:40 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:40 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:40 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:41 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:42 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:42 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [08/Dec/2025:17:11:43 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:43 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:43 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:44 +0100] "GET /components/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [08/Dec/2025:17:11:44 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.108 - - [08/Dec/2025:17:36:44 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.42.178 - - [08/Dec/2025:17:53:18 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 172.70.160.251 - - [08/Dec/2025:18:38:33 +0100] "GET / HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:35 +0100] "GET //.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.162.182 - - [08/Dec/2025:18:38:37 +0100] "GET //.env.local HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.162.182 - - [08/Dec/2025:18:38:38 +0100] "GET //.env.dev HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.162.182 - - [08/Dec/2025:18:38:38 +0100] "GET //.env.prod HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:39 +0100] "GET //.env.staging HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:39 +0100] "GET //.env.development HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:40 +0100] "GET //.env.production HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:41 +0100] "GET //.env.test HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:41 +0100] "GET //.env.backup HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:42 +0100] "GET //.env.example HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:47 +0100] "GET //.env.sample HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:49 +0100] "GET //.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:50 +0100] "GET //.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:51 +0100] "GET //.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:51 +0100] "GET //.env.orig HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:51 +0100] "GET //.env.swp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:52 +0100] "GET //.env~ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:58 +0100] "GET //.env.tmp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:38:59 +0100] "GET //.env.dist HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:00 +0100] "GET //admin/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:01 +0100] "GET //admin/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:01 +0100] "GET //admin/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:02 +0100] "GET //admin/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:02 +0100] "GET //api/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:03 +0100] "GET //api/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:08 +0100] "GET //api/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:10 +0100] "GET //api/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:11 +0100] "GET //app/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:11 +0100] "GET //app/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:12 +0100] "GET //app/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:12 +0100] "GET //app/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:18 +0100] "GET //config/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:20 +0100] "GET //config/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:20 +0100] "GET //config/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:21 +0100] "GET //config/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:21 +0100] "GET //src/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:22 +0100] "GET //src/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:23 +0100] "GET //src/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:24 +0100] "GET //src/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:24 +0100] "GET //public/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:25 +0100] "GET //public/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:31 +0100] "GET //public/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:32 +0100] "GET //public/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:33 +0100] "GET //assets/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:33 +0100] "GET //assets/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:34 +0100] "GET //assets/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:40 +0100] "GET //assets/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:41 +0100] "GET //includes/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:42 +0100] "GET //includes/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:43 +0100] "GET //includes/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:43 +0100] "GET //includes/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:44 +0100] "GET //lib/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:49 +0100] "GET //lib/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:54 +0100] "GET //lib/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:55 +0100] "GET //lib/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:55 +0100] "GET //application/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:56 +0100] "GET //application/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:56 +0100] "GET //application/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:57 +0100] "GET //application/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:58 +0100] "GET //system/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:39:58 +0100] "GET //system/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:00 +0100] "GET //system/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:00 +0100] "GET //system/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:01 +0100] "GET //core/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:06 +0100] "GET //core/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:13 +0100] "GET //core/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:14 +0100] "GET //core/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:15 +0100] "GET //modules/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:16 +0100] "GET //modules/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:17 +0100] "GET //modules/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:18 +0100] "GET //modules/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:18 +0100] "GET //plugins/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:19 +0100] "GET //plugins/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:20 +0100] "GET //plugins/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:26 +0100] "GET //plugins/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:28 +0100] "GET //themes/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:28 +0100] "GET //themes/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:29 +0100] "GET //themes/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:29 +0100] "GET //themes/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:31 +0100] "GET //vendor/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:36 +0100] "GET //vendor/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:39 +0100] "GET //vendor/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:39 +0100] "GET //vendor/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:40 +0100] "GET //storage/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:41 +0100] "GET //storage/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:42 +0100] "GET //storage/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.70.160.251 - - [08/Dec/2025:18:40:43 +0100] "GET //storage/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.210 - - [08/Dec/2025:18:40:44 +0100] "GET /.env.local HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.219 - - [08/Dec/2025:18:40:46 +0100] "GET /.env.dev HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.219 - - [08/Dec/2025:18:40:48 +0100] "GET /.env.prod HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.31 - - [08/Dec/2025:18:40:48 +0100] "GET /.env.staging HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.168 - - [08/Dec/2025:18:40:49 +0100] "GET /.env.development HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.168 - - [08/Dec/2025:18:40:50 +0100] "GET /.env.production HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.31 - - [08/Dec/2025:18:40:50 +0100] "GET /.env.test HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.168 - - [08/Dec/2025:18:40:56 +0100] "GET /.env.backup HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.216 - - [08/Dec/2025:18:40:57 +0100] "GET /.env.example HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.216 - - [08/Dec/2025:18:40:58 +0100] "GET /.env.sample HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.149 - - [08/Dec/2025:18:40:58 +0100] "GET /.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.149 - - [08/Dec/2025:18:40:59 +0100] "GET /.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.105 - - [08/Dec/2025:18:41:00 +0100] "GET /.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.201 - - [08/Dec/2025:18:41:05 +0100] "GET /.env.orig HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.182 - - [08/Dec/2025:18:41:11 +0100] "GET /.env.swp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.201 - - [08/Dec/2025:18:41:13 +0100] "GET /.env~ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.168 - - [08/Dec/2025:18:41:14 +0100] "GET /.env.tmp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.148 - - [08/Dec/2025:18:41:14 +0100] "GET /.env.dist HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.114 - - [08/Dec/2025:18:41:15 +0100] "GET /admin/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.160 - - [08/Dec/2025:18:41:16 +0100] "GET /admin/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.149 - - [08/Dec/2025:18:41:17 +0100] "GET /admin/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.213 - - [08/Dec/2025:18:41:17 +0100] "GET /admin/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.216 - - [08/Dec/2025:18:41:18 +0100] "GET /api/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.223 - - [08/Dec/2025:18:41:18 +0100] "GET /api/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.182 - - [08/Dec/2025:18:41:19 +0100] "GET /api/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.203 - - [08/Dec/2025:18:41:20 +0100] "GET /api/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.149 - - [08/Dec/2025:18:41:21 +0100] "GET /app/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.105 - - [08/Dec/2025:18:41:21 +0100] "GET /app/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.201 - - [08/Dec/2025:18:41:22 +0100] "GET /app/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.149 - - [08/Dec/2025:18:41:23 +0100] "GET /app/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.105 - - [08/Dec/2025:18:41:24 +0100] "GET /config/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.223 - - [08/Dec/2025:18:41:24 +0100] "GET /config/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.201 - - [08/Dec/2025:18:41:25 +0100] "GET /config/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.148 - - [08/Dec/2025:18:41:31 +0100] "GET /config/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.111 - - [08/Dec/2025:18:41:33 +0100] "GET /src/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.135 - - [08/Dec/2025:18:41:34 +0100] "GET /src/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.153 - - [08/Dec/2025:18:41:35 +0100] "GET /src/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.160 - - [08/Dec/2025:18:41:35 +0100] "GET /src/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.216 - - [08/Dec/2025:18:41:36 +0100] "GET /public/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.114 - - [08/Dec/2025:18:41:37 +0100] "GET /public/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.201 - - [08/Dec/2025:18:41:38 +0100] "GET /public/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.203 - - [08/Dec/2025:18:41:39 +0100] "GET /public/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.114 - - [08/Dec/2025:18:41:40 +0100] "GET /assets/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.31 - - [08/Dec/2025:18:41:40 +0100] "GET /assets/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.203 - - [08/Dec/2025:18:41:41 +0100] "GET /assets/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.210 - - [08/Dec/2025:18:41:42 +0100] "GET /assets/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.219 - - [08/Dec/2025:18:41:43 +0100] "GET /includes/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.146 - - [08/Dec/2025:18:41:44 +0100] "GET /includes/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.160 - - [08/Dec/2025:18:41:45 +0100] "GET /includes/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.187 - - [08/Dec/2025:18:41:46 +0100] "GET /includes/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.68 - - [08/Dec/2025:18:41:47 +0100] "GET /lib/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.213 - - [08/Dec/2025:18:41:47 +0100] "GET /lib/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.146 - - [08/Dec/2025:18:41:48 +0100] "GET /lib/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.111 - - [08/Dec/2025:18:41:53 +0100] "GET /lib/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.148 - - [08/Dec/2025:18:41:56 +0100] "GET /application/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.107 - - [08/Dec/2025:18:41:57 +0100] "GET /application/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.146 - - [08/Dec/2025:18:41:58 +0100] "GET /application/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.153 - - [08/Dec/2025:18:41:59 +0100] "GET /application/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.31 - - [08/Dec/2025:18:41:59 +0100] "GET /system/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.72 - - [08/Dec/2025:18:42:04 +0100] "GET /system/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.146 - - [08/Dec/2025:18:42:06 +0100] "GET /system/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.210 - - [08/Dec/2025:18:42:06 +0100] "GET /system/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.72 - - [08/Dec/2025:18:42:07 +0100] "GET /core/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.135 - - [08/Dec/2025:18:42:07 +0100] "GET /core/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.146 - - [08/Dec/2025:18:42:08 +0100] "GET /core/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.219 - - [08/Dec/2025:18:42:09 +0100] "GET /core/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.146 - - [08/Dec/2025:18:42:19 +0100] "GET /modules/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.182 - - [08/Dec/2025:18:42:19 +0100] "GET /modules/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.187 - - [08/Dec/2025:18:42:20 +0100] "GET /modules/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.68 - - [08/Dec/2025:18:42:21 +0100] "GET /modules/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.78 - - [08/Dec/2025:18:42:22 +0100] "GET /plugins/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.218 - - [08/Dec/2025:18:42:22 +0100] "GET /plugins/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.219 - - [08/Dec/2025:18:42:28 +0100] "GET /plugins/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.201 - - [08/Dec/2025:18:42:29 +0100] "GET /plugins/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.153 - - [08/Dec/2025:18:42:30 +0100] "GET /themes/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 162.158.167.153 - - [08/Dec/2025:18:42:30 +0100] "GET /themes/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:31 +0100] "GET /vendor/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:32 +0100] "GET /vendor/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:33 +0100] "GET /vendor/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:33 +0100] "GET /vendor/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:34 +0100] "GET /storage/.env HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:34 +0100] "GET /storage/.env.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:35 +0100] "GET /storage/.env.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:36 +0100] "GET /storage/.env.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:36 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:37 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:38 +0100] "GET /php_info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:39 +0100] "GET /phpinfo HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:39 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:40 +0100] "GET /info1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:41 +0100] "GET /info2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:41 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:42 +0100] "GET /pi.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:43 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:43 +0100] "GET /phpversion.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:44 +0100] "GET /php_version.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:44 +0100] "GET /serverinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:45 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:45 +0100] "GET /debug.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:46 +0100] "GET /diagnostic.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:47 +0100] "GET /phptest.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:48 +0100] "GET /check.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:49 +0100] "GET /phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:50 +0100] "GET /info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:50 +0100] "GET /php_info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:51 +0100] "GET /test.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:52 +0100] "GET /phpinfo.php.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:52 +0100] "GET /info.php.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:52 +0100] "GET /php_info.php.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:53 +0100] "GET /test.php.bak HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:54 +0100] "GET /phpinfo.php.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:42:55 +0100] "GET /info.php.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:00 +0100] "GET /php_info.php.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:01 +0100] "GET /test.php.old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:02 +0100] "GET /phpinfo.php.orig HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:02 +0100] "GET /info.php.orig HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:03 +0100] "GET /php_info.php.orig HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:03 +0100] "GET /test.php.orig HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:04 +0100] "GET /phpinfo.php.backup HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:05 +0100] "GET /info.php.backup HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:05 +0100] "GET /php_info.php.backup HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:06 +0100] "GET /test.php.backup HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:07 +0100] "GET /phpinfo.php~ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:07 +0100] "GET /info.php~ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:08 +0100] "GET /php_info.php~ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:08 +0100] "GET /test.php~ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:09 +0100] "GET /phpinfo.php.swp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:10 +0100] "GET /info.php.swp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:11 +0100] "GET /php_info.php.swp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:11 +0100] "GET /test.php.swp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:12 +0100] "GET /phpinfo.php.tmp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:12 +0100] "GET /info.php.tmp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:13 +0100] "GET /php_info.php.tmp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:14 +0100] "GET /test.php.tmp HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:15 +0100] "GET /admin/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:15 +0100] "GET /admin/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:17 +0100] "GET /admin/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:17 +0100] "GET /admin/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:18 +0100] "GET /test/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:18 +0100] "GET /test/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:18 +0100] "GET /test/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:20 +0100] "GET /test/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:20 +0100] "GET /dev/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:21 +0100] "GET /dev/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:21 +0100] "GET /dev/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:22 +0100] "GET /dev/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:22 +0100] "GET /tmp/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:24 +0100] "GET /tmp/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:24 +0100] "GET /tmp/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:24 +0100] "GET /tmp/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:25 +0100] "GET /includes/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:26 +0100] "GET /includes/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:26 +0100] "GET /includes/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:27 +0100] "GET /includes/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:28 +0100] "GET /scripts/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:29 +0100] "GET /scripts/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:29 +0100] "GET /scripts/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:30 +0100] "GET /scripts/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:30 +0100] "GET /cgi-bin/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:31 +0100] "GET /cgi-bin/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:31 +0100] "GET /cgi-bin/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:32 +0100] "GET /cgi-bin/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:33 +0100] "GET /public/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:33 +0100] "GET /public/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:34 +0100] "GET /public/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:35 +0100] "GET /public/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:35 +0100] "GET /web/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:36 +0100] "GET /web/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:37 +0100] "GET /web/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:37 +0100] "GET /web/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:38 +0100] "GET /www/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:38 +0100] "GET /www/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:39 +0100] "GET /www/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:40 +0100] "GET /www/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:40 +0100] "GET /site/phpinfo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:41 +0100] "GET /site/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:41 +0100] "GET /site/phpinfo.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:42 +0100] "GET /site/info.php.save HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.69.224.21 - - [08/Dec/2025:18:43:42 +0100] "GET /.git/config HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/536.31 (KHTML, like Gecko) Chrome/17.0.581.22 Safari/535.15" 172.68.2.87 - - [08/Dec/2025:18:44:23 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.68.3.33 - - [08/Dec/2025:18:44:24 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.3.33 - - [08/Dec/2025:18:44:24 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.3.33 - - [08/Dec/2025:18:44:24 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 172.68.3.33 - - [08/Dec/2025:18:44:24 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.68.3.33 - - [08/Dec/2025:18:44:24 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.68.3.33 - - [08/Dec/2025:18:44:24 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.70.47.29 - - [08/Dec/2025:20:03:39 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 172.71.183.105 - - [08/Dec/2025:20:03:39 +0100] "HEAD /index.html HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 172.71.103.56 - - [08/Dec/2025:20:03:39 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.95.95 - - [08/Dec/2025:20:03:39 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 141.101.76.58 - - [08/Dec/2025:20:03:41 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.103.106 - - [08/Dec/2025:20:03:42 +0100] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.99.227 - - [08/Dec/2025:20:03:42 +0100] "GET /.git/ORIG_HEAD HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.95.129 - - [08/Dec/2025:20:03:42 +0100] "GET /.git/index HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.103.106 - - [08/Dec/2025:20:03:42 +0100] "GET /.git/logs/HEAD HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.159.113.110 - - [08/Dec/2025:20:03:43 +0100] "GET /.git/info/exclude HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.103.106 - - [08/Dec/2025:20:03:43 +0100] "GET /.git/packed-refs HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.183.106 - - [08/Dec/2025:20:03:43 +0100] "GET /.git/FETCH_HEAD HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.166.168 - - [08/Dec/2025:20:03:43 +0100] "GET /.git/refs/heads/master HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.170.73 - - [08/Dec/2025:20:03:43 +0100] "GET /.git/refs/heads/main HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.172.10 - - [08/Dec/2025:20:03:43 +0100] "GET /.git/refs/remotes/origin/HEAD HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.246.150 - - [08/Dec/2025:20:05:17 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 108.162.246.150 - - [08/Dec/2025:20:05:17 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 108.162.246.150 - - [08/Dec/2025:20:05:17 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 108.162.246.150 - - [08/Dec/2025:20:05:17 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 108.162.246.150 - - [08/Dec/2025:20:05:17 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 108.162.246.150 - - [08/Dec/2025:20:05:17 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 108.162.246.150 - - [08/Dec/2025:20:05:17 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 162.158.114.51 - - [08/Dec/2025:22:15:54 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:15:54 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:15:55 +0100] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:15:55 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:15:55 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:15:56 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:15:56 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:15:56 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:15:57 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:15:57 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:15:58 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:15:58 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:15:58 +0100] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:15:59 +0100] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:15:59 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:15:59 +0100] "GET /wp-admin/js/managert.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:00 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:00 +0100] "GET /wp-admin/maint/nxc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:00 +0100] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.51 - - [08/Dec/2025:22:16:01 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:01 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:02 +0100] "GET /wp-admin/network/nxc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:02 +0100] "GET /wp-admin/nxc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:02 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:03 +0100] "GET /wp-admin/user/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:03 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:03 +0100] "GET /wp-admin/wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:04 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:04 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:04 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:05 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:05 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:05 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:06 +0100] "GET /wp-content/autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:06 +0100] "GET /wp-content/banners/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:07 +0100] "GET /wp-content/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:07 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:07 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.51 - - [08/Dec/2025:22:16:08 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:08 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:08 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:09 +0100] "GET /wp-content/plugins/Iitespeed-cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:09 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:09 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:10 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:10 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:11 +0100] "GET /wp-content/plugins/mainhosting/default.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.51 - - [08/Dec/2025:22:16:11 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:11 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:12 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:12 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:12 +0100] "GET /wp-content/themes/nxc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:13 +0100] "GET /wp-content/themes/pridmag/nxc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:13 +0100] "GET /wp-content/themes/shorts.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:13 +0100] "GET /wp-content/themes/too.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:14 +0100] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.51 - - [08/Dec/2025:22:16:14 +0100] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:14 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:15 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:15 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:16 +0100] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:16 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.51 - - [08/Dec/2025:22:16:16 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.51 - - [08/Dec/2025:22:16:17 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.51 - - [08/Dec/2025:22:16:17 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:42 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.69 - - [09/Dec/2025:00:47:43 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [09/Dec/2025:00:47:43 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.69 - - [09/Dec/2025:00:47:44 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.69 - - [09/Dec/2025:00:47:44 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.69 - - [09/Dec/2025:00:47:44 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [09/Dec/2025:00:47:45 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:45 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:47:45 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:46 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:46 +0100] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:47:47 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:47:47 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:48 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:48 +0100] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:48 +0100] "GET /wp-includes/blocks/tag-cloud/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:49 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:49 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:47:49 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:47:50 +0100] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:50 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:51 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:51 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:51 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:52 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:52 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:53 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:53 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:47:54 +0100] "GET /wp-includes/pomo/nxc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:54 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:47:54 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:55 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:55 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:47:56 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:56 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:57 +0100] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:57 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:57 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:00:47:58 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:58 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:58 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:59 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:59 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:47:59 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:00 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:48:00 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:48:00 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:48:01 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:01 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:01 +0100] "GET /av.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:02 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:02 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:48:02 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:03 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:48:03 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:48:04 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:48:04 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:04 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:05 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:05 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:00:48:05 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:06 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:06 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:00:48:06 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:00:48:07 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.82.61 - - [09/Dec/2025:00:58:50 +0100] "GET /eng/Contact.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Trailer/93.3.3516.28" 162.158.178.20 - - [09/Dec/2025:00:59:15 +0100] "GET /kontakt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 162.158.182.192 - - [09/Dec/2025:01:18:30 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:32 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:33 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:33 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:34 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:35 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:36 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:36 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:36 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:37 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:37 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:38 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:39 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:39 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:40 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:18:40 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:18:40 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:41 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:41 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:42 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:42 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:43 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:43 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:43 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:44 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:44 +0100] "GET /install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:45 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:45 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:46 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:46 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:47 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:48 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:48 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:49 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:50 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:50 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:51 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:52 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:53 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:54 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:54 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:55 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:55 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:56 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:56 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:56 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:57 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:57 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:58 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:18:58 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:58 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:18:59 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:18:59 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:00 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:00 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:01 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:19:01 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:01 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:02 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:02 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:03 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:19:03 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:04 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:04 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:05 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:05 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:06 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:06 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:06 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:07 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:07 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:08 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:08 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:09 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:09 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:10 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:10 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:11 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:11 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:12 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:12 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:19:13 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:14 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:15 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:15 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:16 +0100] "GET /x.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:16 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:17 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:17 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:18 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:19 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:19 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:20 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:21 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:19:21 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:21 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:22 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:23 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:23 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:24 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:25 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:25 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:26 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:26 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:27 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:28 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:28 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:29 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:29 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:30 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:30 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:31 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:31 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:32 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:33 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:34 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:34 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:34 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:35 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:35 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:35 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:36 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:36 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:37 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:37 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:37 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:38 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:38 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:39 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:39 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:39 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:40 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:40 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:40 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:19:41 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:42 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:43 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:43 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:44 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:44 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:45 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:45 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:45 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:46 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:46 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:47 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:47 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:48 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:48 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:49 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:49 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:49 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:50 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:50 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:51 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:51 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:52 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:53 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:53 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:54 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:54 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:55 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:55 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:55 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:56 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:57 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:58 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:58 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:59 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:19:59 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:19:59 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:00 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:00 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:01 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:02 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:02 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:03 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:03 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:03 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:05 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:06 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:07 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:07 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:07 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:08 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:08 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:20:09 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:09 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:10 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:10 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:11 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:21 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:22 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:22 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:23 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:23 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:24 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:24 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:24 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:25 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:25 +0100] "GET /system/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:25 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:26 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:27 +0100] "GET /files/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:27 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:27 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:20:28 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:29 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:30 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:30 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:31 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:31 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:32 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:32 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:33 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:33 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:33 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:34 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:34 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:35 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:36 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:37 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:37 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:38 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:38 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:39 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:39 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:39 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:40 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:41 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:41 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:42 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:42 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:43 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:44 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.182.192 - - [09/Dec/2025:01:20:44 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:44 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:45 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:46 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:46 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:46 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:47 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:47 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:48 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:48 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:49 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:49 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:50 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:50 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.182.192 - - [09/Dec/2025:01:20:51 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:51 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.182.192 - - [09/Dec/2025:01:20:52 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.246.101 - - [09/Dec/2025:02:41:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:41:57 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:41:58 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:41:58 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:41:58 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:41:59 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:41:59 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:42:00 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:42:00 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.170.35 - - [09/Dec/2025:02:42:00 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:42:01 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:42:01 +0100] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:42:02 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:42:02 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.35 - - [09/Dec/2025:02:42:02 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:03 +0100] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:03 +0100] "GET /wp-includes/blocks/tag-cloud/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:03 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:04 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:04 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:05 +0100] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:05 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:05 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:06 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:06 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:07 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:07 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.170.251 - - [09/Dec/2025:02:42:07 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:08 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:08 +0100] "GET /wp-includes/pomo/nxc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:09 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:09 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:09 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:10 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:10 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:10 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:11 +0100] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:11 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.170.251 - - [09/Dec/2025:02:42:12 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:12 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:12 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:13 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:13 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:14 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:14 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:14 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:15 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:15 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:15 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:16 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:16 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:17 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:17 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:17 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:18 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:18 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.170.251 - - [09/Dec/2025:02:42:18 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:19 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:19 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:20 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:20 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:20 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:21 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.170.251 - - [09/Dec/2025:02:42:21 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:22 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.170.251 - - [09/Dec/2025:02:42:22 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:01 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.120 - - [09/Dec/2025:05:07:02 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.120 - - [09/Dec/2025:05:07:03 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.120 - - [09/Dec/2025:05:07:03 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.120 - - [09/Dec/2025:05:07:03 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.120 - - [09/Dec/2025:05:07:04 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.120 - - [09/Dec/2025:05:07:04 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.120 - - [09/Dec/2025:05:07:04 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.120 - - [09/Dec/2025:05:07:05 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.120 - - [09/Dec/2025:05:07:05 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.120 - - [09/Dec/2025:05:07:06 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.120 - - [09/Dec/2025:05:07:06 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.120 - - [09/Dec/2025:05:07:06 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:07 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:07 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:07 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:08 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:08 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:08 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:09 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:09 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:09 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:10 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:10 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:11 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:11 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:11 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:12 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:12 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:12 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:13 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:13 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:13 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:14 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:14 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:14 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:15 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:15 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:15 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:16 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:16 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:16 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:17 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:17 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:18 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:18 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:18 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:19 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:19 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:19 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:20 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:20 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:20 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:21 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:21 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:21 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:22 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:22 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:22 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:23 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:23 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:23 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:24 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:24 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:25 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:25 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:25 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:26 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:26 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:26 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:27 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:27 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:27 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:28 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:28 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:28 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:29 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:29 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:29 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:30 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:30 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:31 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:31 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:31 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:32 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:32 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:32 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:33 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:33 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:33 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:34 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:34 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:34 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:35 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:35 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:35 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:36 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:36 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:36 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:37 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:37 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:37 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:38 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:38 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:39 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:39 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:39 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:40 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:40 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:40 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:41 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:41 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:41 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:42 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:42 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:43 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:43 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:43 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:44 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:44 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:44 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:45 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:45 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:45 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:46 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:46 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:46 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:47 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:47 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:47 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:48 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:48 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:48 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:49 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:49 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:50 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:50 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:50 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:51 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:51 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:51 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:52 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:52 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:52 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:53 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:53 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:53 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:54 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:54 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:54 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:55 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:55 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:56 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:56 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:56 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:57 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:57 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:57 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:58 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:58 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:58 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:07:59 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:07:59 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:07:59 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:00 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:00 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:00 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:01 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:01 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:08:01 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:02 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:02 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:03 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:03 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:03 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:04 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:04 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:08:04 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:05 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:05 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:05 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:06 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:06 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:06 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:07 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:07 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:07 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:08 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:08 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:09 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:09 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:09 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:10 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:10 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:10 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:11 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:11 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:11 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:12 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:12 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:12 +0100] "GET /system/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:13 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:13 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:13 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:14 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:14 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:15 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:15 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:15 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:16 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:16 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:08:16 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:17 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:17 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:08:17 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:18 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:18 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:18 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:19 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:19 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:19 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:20 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:20 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:21 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:21 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:21 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:22 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:22 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:22 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:23 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:23 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:23 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:24 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:24 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:24 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:25 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:25 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:25 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:26 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:26 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:27 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.7 - - [09/Dec/2025:05:08:27 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:27 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:28 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:28 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:28 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:29 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:29 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:29 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.7 - - [09/Dec/2025:05:08:30 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:30 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.7 - - [09/Dec/2025:05:08:30 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.70.22 - - [09/Dec/2025:05:10:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.69.169.226 - - [09/Dec/2025:06:01:21 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:22 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:22 +0100] "GET /.well-known/server.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:22 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.205 - - [09/Dec/2025:06:01:22 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:23 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:23 +0100] "GET /96i.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.205 - - [09/Dec/2025:06:01:23 +0100] "GET /a.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.205 - - [09/Dec/2025:06:01:24 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:24 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.205 - - [09/Dec/2025:06:01:24 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:24 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:25 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.205 - - [09/Dec/2025:06:01:25 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:25 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:25 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:26 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.205 - - [09/Dec/2025:06:01:26 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:26 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [09/Dec/2025:06:01:26 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:27 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:27 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:27 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:27 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [09/Dec/2025:06:01:28 +0100] "GET /click.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:28 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:28 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:28 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [09/Dec/2025:06:01:29 +0100] "GET /cord.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:29 +0100] "GET /core.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:29 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:29 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [09/Dec/2025:06:01:30 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:30 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:30 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:30 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:31 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [09/Dec/2025:06:01:31 +0100] "GET /help.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:31 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:31 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:32 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:32 +0100] "GET /images/nxc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:32 +0100] "GET /img/nxc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:32 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:33 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:33 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:33 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:34 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:34 +0100] "GET /log.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:34 +0100] "GET /lv.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:34 +0100] "GET /m.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:35 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:35 +0100] "GET /network_xo.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:35 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:35 +0100] "GET /nxc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:36 +0100] "GET /packed.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:36 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [09/Dec/2025:06:01:36 +0100] "GET /rss.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:36 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:37 +0100] "GET /system_log.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:37 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:37 +0100] "GET /upload/gpt-sh2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:37 +0100] "GET /we.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [09/Dec/2025:06:01:38 +0100] "GET /worksec.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.94.172 - - [09/Dec/2025:06:19:04 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.103.83 - - [09/Dec/2025:06:50:21 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.125 Safari/537.36" 104.23.223.133 - - [09/Dec/2025:06:50:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.0; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" 172.64.198.228 - - [09/Dec/2025:06:50:24 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.11) Gecko/2009060310 Linux Mint/6 (Felicia) Firefox/3.0.11" 172.64.198.228 - - [09/Dec/2025:06:50:25 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.1.1; Coolpad 3622A Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Mobile Safari/537.36" 104.23.217.152 - - [09/Dec/2025:06:50:25 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.26 Safari/537.11" 162.158.172.95 - - [09/Dec/2025:06:50:26 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; (R1 1.5))" 104.23.217.152 - - [09/Dec/2025:06:50:26 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 104.23.223.133 - - [09/Dec/2025:06:50:26 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; GTB7.5; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; CMDTDFJS; F9J; InfoPath.3)" 104.23.221.108 - - [09/Dec/2025:06:50:27 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063" 162.158.49.201 - - [09/Dec/2025:08:10:02 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:03 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:03 +0100] "GET /ah22.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:04 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:04 +0100] "GET /blurbs18.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:04 +0100] "GET /flap.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:05 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:05 +0100] "GET /ghh.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:05 +0100] "GET /bb5.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:06 +0100] "GET /ce.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:06 +0100] "GET /sdm.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:06 +0100] "GET /por.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:07 +0100] "GET /nux.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:07 +0100] "GET /IRI.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:07 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:07 +0100] "GET /85ohni.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:08 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:08 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:08 +0100] "GET /tyasd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:09 +0100] "GET /wp-set.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:09 +0100] "GET /AMW.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:09 +0100] "GET /file15.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:10 +0100] "GET /waba.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:10 +0100] "GET /styll.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:10 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:11 +0100] "GET /cheko.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:11 +0100] "GET /xindex.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:11 +0100] "GET /priv8.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:12 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:12 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:12 +0100] "GET /t1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:13 +0100] "GET /sfcl.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:13 +0100] "GET /oysdxc.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:13 +0100] "GET /wp-admin/css/colors/sfcl.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:14 +0100] "GET /ycc.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:14 +0100] "GET /wp-includes/Requests/11.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [09/Dec/2025:08:10:14 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 172.68.211.12 - - [09/Dec/2025:08:34:11 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.194 - - [09/Dec/2025:08:34:13 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:14 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:14 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:15 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:15 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:15 +0100] "GET /wp-content/themes/pridmag/install.phpu HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:16 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.211.12 - - [09/Dec/2025:08:34:16 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:17 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:17 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:17 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:18 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:18 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:18 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:19 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:19 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:19 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:20 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:20 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:21 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:21 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:21 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:22 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:22 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:22 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:23 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:23 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:23 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:24 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:24 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:25 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:25 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:25 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:26 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:26 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:26 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:27 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:27 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:28 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:28 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:28 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:29 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:29 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:29 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:30 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:30 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:30 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:31 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:31 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:32 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:32 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:32 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:33 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:33 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:34 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:34 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:34 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:35 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:35 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:35 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:36 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.211.12 - - [09/Dec/2025:08:34:36 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:36 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.211.12 - - [09/Dec/2025:08:34:37 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [09/Dec/2025:10:43:42 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:44 +0100] "GET /shoha.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:45 +0100] "GET /first.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:45 +0100] "GET /show/asa.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:46 +0100] "GET /tarc.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:46 +0100] "GET /nas.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:47 +0100] "GET /jju.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:47 +0100] "GET /cool.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:47 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:48 +0100] "GET /schallfuns.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:48 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:48 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:49 +0100] "GET /gib.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:49 +0100] "GET /article.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:50 +0100] "GET /efile.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:50 +0100] "GET /wui.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:51 +0100] "GET /cgn.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:51 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:51 +0100] "GET /spk.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:52 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:52 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:52 +0100] "GET /2r.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:53 +0100] "GET /mailer.php7 HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:53 +0100] "GET /rsnu.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:53 +0100] "GET /dom.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:54 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:54 +0100] "GET /ula.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:55 +0100] "GET /x0.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:55 +0100] "GET /rss.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:56 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:56 +0100] "GET /skj.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:57 +0100] "GET /dox.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:57 +0100] "GET /haf.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:57 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:58 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:58 +0100] "GET /eru.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:59 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:43:59 +0100] "GET /wsx.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:00 +0100] "GET /suy.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:00 +0100] "GET /dop.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:00 +0100] "GET /zde.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:01 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:02 +0100] "GET /sty.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:02 +0100] "GET /jga.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:03 +0100] "GET /led.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:03 +0100] "GET /jmfi2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:03 +0100] "GET /vast.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:04 +0100] "GET /ea.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:04 +0100] "GET /bb.php7 HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:04 +0100] "GET /888.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:05 +0100] "GET /rei.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:05 +0100] "GET /file3.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:06 +0100] "GET /nok.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:06 +0100] "GET /asgtt.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:07 +0100] "GET /d57.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:07 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:08 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:08 +0100] "GET /file52.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:08 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:09 +0100] "GET /fs.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:09 +0100] "GET /a1vx.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:09 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:10 +0100] "GET /tro.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:10 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:11 +0100] "GET /keu.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:11 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:11 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:12 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:12 +0100] "GET /73106.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:12 +0100] "GET /wolv.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:13 +0100] "GET /yanki.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:13 +0100] "GET /ouh.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:14 +0100] "GET /555.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:14 +0100] "GET /dlu.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:15 +0100] "GET /dds.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:15 +0100] "GET /NH19T66T.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:16 +0100] "GET /ad24f.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:16 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:16 +0100] "GET /sec.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:17 +0100] "GET /wp-su.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:17 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:17 +0100] "GET /JPG.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:18 +0100] "GET /te.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:18 +0100] "GET /poj.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:19 +0100] "GET /gi.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:19 +0100] "GET /gfile1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:19 +0100] "GET /wp-freya.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:20 +0100] "GET /2%25.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:21 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:21 +0100] "GET /faq.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:22 +0100] "GET /x3.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:22 +0100] "GET /nbr.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:23 +0100] "GET /lov.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:23 +0100] "GET /yawa.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:24 +0100] "GET /kla.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:24 +0100] "GET /hum.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:25 +0100] "GET /zuk.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:25 +0100] "GET /ed35f.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:26 +0100] "GET /file32.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:26 +0100] "GET /zgh.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:27 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:27 +0100] "GET /ava.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:27 +0100] "GET /shell1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:28 +0100] "GET /thoms.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:28 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:29 +0100] "GET /has.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:30 +0100] "GET /pent.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:31 +0100] "GET /wfile.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:31 +0100] "GET /hexx.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:32 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:32 +0100] "GET /eauu.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:32 +0100] "GET /1%25.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:35 +0100] "GET /444.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:36 +0100] "GET /09fa6.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:36 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:36 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:37 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:37 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:37 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:38 +0100] "GET /ioxi2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:38 +0100] "GET /q1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:38 +0100] "GET /zil.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:39 +0100] "GET /wle.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:39 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:40 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:40 +0100] "GET /csv.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:41 +0100] "GET /wp-admin/new2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:41 +0100] "GET /ooj.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:41 +0100] "GET /filesss.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:42 +0100] "GET /3.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:42 +0100] "GET /av.php.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:42 +0100] "GET /xz99.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:43 +0100] "GET /file13.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:43 +0100] "GET /ifm.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:44 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:44 +0100] "GET /nfile.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:45 +0100] "GET /aaaa.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:45 +0100] "GET /ker.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:46 +0100] "GET /gul.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:46 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:47 +0100] "GET /lok.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:47 +0100] "GET /hey.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:47 +0100] "GET /e3.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:48 +0100] "GET /wok.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:48 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:49 +0100] "GET /hzz.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:49 +0100] "GET /mpxct.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:50 +0100] "GET /ex.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:50 +0100] "GET /kki.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:50 +0100] "GET /file88.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:51 +0100] "GET /file18.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:51 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:51 +0100] "GET /fns.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:52 +0100] "GET /sadis.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:52 +0100] "GET /c451f.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:53 +0100] "GET /031.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:53 +0100] "GET /loi.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:54 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:54 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:55 +0100] "GET /h2a2ck.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:55 +0100] "GET /11index.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:56 +0100] "GET /alexus.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:56 +0100] "GET /wan.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:56 +0100] "GET /iov.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:57 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:57 +0100] "GET /xxxq.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:58 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:58 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:59 +0100] "GET /GX.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:44:59 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:00 +0100] "GET /efa4f.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:00 +0100] "GET /ilex.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:01 +0100] "GET /ffile.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:01 +0100] "GET /public/new2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:01 +0100] "GET /axx.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:02 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:02 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:03 +0100] "GET /file6.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:03 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:04 +0100] "GET /sow.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:04 +0100] "GET /666.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:04 +0100] "GET /55.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:05 +0100] "GET /cfile.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:05 +0100] "GET /Tgb5C9.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:05 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:06 +0100] "GET /cccc.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:06 +0100] "GET /10.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:07 +0100] "GET /kal.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:07 +0100] "GET /dfre.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:07 +0100] "GET /tua.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:08 +0100] "GET /admir.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:09 +0100] "GET /wsr2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:09 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:09 +0100] "GET /wto.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:09 +0100] "GET /ink.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:10 +0100] "GET /7f8c8.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:10 +0100] "GET /qlex1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:11 +0100] "GET /pes.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:11 +0100] "GET /redi.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:11 +0100] "GET /man.php7 HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:12 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:12 +0100] "GET /hob.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:12 +0100] "GET /4ff11.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:13 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:13 +0100] "GET /0%25.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:13 +0100] "GET /zeal.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:14 +0100] "GET /des.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:14 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:15 +0100] "GET /class.1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:15 +0100] "GET /usep.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:16 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:16 +0100] "GET /hi.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:17 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:17 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:17 +0100] "GET /yasnu.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:18 +0100] "GET /r79.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:18 +0100] "GET /777.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [09/Dec/2025:10:45:19 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.64.215.13 - - [09/Dec/2025:10:58:22 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:23 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:24 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:24 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:24 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:24 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:25 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:25 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.13 - - [09/Dec/2025:10:58:25 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:25 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:26 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:26 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:26 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:26 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:27 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:27 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:27 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:27 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:28 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:28 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:28 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:28 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:29 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:29 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:29 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:29 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:30 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:30 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:30 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:30 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:31 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:31 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:31 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:31 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:32 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:32 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:32 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:32 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:33 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:33 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:33 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:33 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:33 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:34 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:34 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:34 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:34 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:35 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:35 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.13 - - [09/Dec/2025:10:58:35 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:35 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:36 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:10:58:36 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:36 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:10:58:36 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.158.189 - - [09/Dec/2025:12:59:16 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.233.55 - - [09/Dec/2025:13:25:57 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:25:59 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:25:59 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:25:59 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:00 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:00 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:00 +0100] "GET /wp-content/themes/pridmag/install.phpu HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:01 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:01 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:01 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:02 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:02 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:02 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:02 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:03 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:03 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:03 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:03 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:04 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:04 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:04 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:04 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:05 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:05 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:05 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:05 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:06 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:06 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:06 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:07 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.55 - - [09/Dec/2025:13:26:07 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:07 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:07 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:08 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:08 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:08 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:08 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:09 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:09 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:09 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:09 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:10 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:10 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:10 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:10 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:12 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:13 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:13 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:13 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:14 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:14 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:14 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:15 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:15 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:15 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:15 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:16 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:16 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.55 - - [09/Dec/2025:13:26:16 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:16 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:17 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:17 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:17 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [09/Dec/2025:13:26:17 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [09/Dec/2025:13:26:18 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:31 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:33 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:34 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:34 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:34 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:35 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:35 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:35 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:36 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:36 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:37 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:37 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:38 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:38 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.13 - - [09/Dec/2025:14:12:39 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:39 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:39 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:40 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:40 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:41 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:41 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:41 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:42 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:42 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:42 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:43 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:43 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:44 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:44 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:44 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:45 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:45 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:45 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:46 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:47 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:47 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:48 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:48 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:48 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:48 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:49 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:49 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:50 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:50 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:51 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:51 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:51 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:52 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:52 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:53 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:54 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:54 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:55 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:56 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:56 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:57 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:57 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:58 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:58 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:59 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.13 - - [09/Dec/2025:14:12:59 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.13 - - [09/Dec/2025:14:12:59 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.154.84 - - [09/Dec/2025:15:47:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.167.129 - - [09/Dec/2025:15:47:03 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:13 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.50 - - [09/Dec/2025:15:49:15 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:15 +0100] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:15 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:16 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:16 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:16 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:17 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:17 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:18 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:18 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:18 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:19 +0100] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:19 +0100] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:19 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:20 +0100] "GET /wp-admin/js/managert.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:20 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:21 +0100] "GET /wp-admin/maint/nxc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:21 +0100] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:21 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:22 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:22 +0100] "GET /wp-admin/network/nxc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:22 +0100] "GET /wp-admin/nxc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:23 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:23 +0100] "GET /wp-admin/user/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:24 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:24 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:24 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:25 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:25 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:25 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:26 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:26 +0100] "GET /wp-content/autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:26 +0100] "GET /wp-content/banners/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:27 +0100] "GET /wp-content/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:27 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:28 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:28 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:28 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:29 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:29 +0100] "GET /wp-content/plugins/Iitespeed-cache/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:29 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:30 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:30 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:30 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:31 +0100] "GET /wp-content/plugins/mainhosting/default.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:31 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:32 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:32 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:32 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:33 +0100] "GET /wp-content/themes/nxc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:33 +0100] "GET /wp-content/themes/pridmag/nxc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:33 +0100] "GET /wp-content/themes/shorts.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:34 +0100] "GET /wp-content/themes/too.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:34 +0100] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:35 +0100] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:35 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:35 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:36 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:36 +0100] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:36 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:37 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.114.50 - - [09/Dec/2025:15:49:37 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.50 - - [09/Dec/2025:15:49:37 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.195.107 - - [09/Dec/2025:16:39:47 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.114.50 - - [09/Dec/2025:17:24:20 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:21 +0100] "GET /neshe HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:22 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:22 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:23 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:23 +0100] "GET /d2.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:24 +0100] "GET /snus.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:24 +0100] "GET /011i.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:24 +0100] "GET /disaos.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:25 +0100] "GET /gdn.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:25 +0100] "GET /xc.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:25 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 162.158.114.168 - - [09/Dec/2025:17:24:26 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:26 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:26 +0100] "GET /20.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:27 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:27 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:28 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:28 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:28 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:29 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:29 +0100] "GET /4.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:29 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:30 +0100] "GET /r.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:30 +0100] "GET /v4.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:31 +0100] "GET /wp-22.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:31 +0100] "GET /makeasmtp.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:31 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:32 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:32 +0100] "GET /t.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:32 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:33 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:33 +0100] "GET /gdn.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:34 +0100] "GET /6.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:34 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:34 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:35 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:35 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:35 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:36 +0100] "GET /go.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:36 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:37 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:37 +0100] "GET /dichku.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:37 +0100] "GET /h2a2ck.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:38 +0100] "GET /y7.PHP HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:38 +0100] "GET /yr.PHP HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:39 +0100] "GET /l3gi0n.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:39 +0100] "GET /loads.PhP HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:39 +0100] "GET /mj.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:40 +0100] "GET /dichku.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:40 +0100] "GET /zsz.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:40 +0100] "GET /h2a2ck.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:41 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:41 +0100] "GET /fs6.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:42 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:42 +0100] "GET /byp8.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:42 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:43 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:43 +0100] "GET /trplv.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:43 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:44 +0100] "GET /wa.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:44 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:44 +0100] "GET /1.php? HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:45 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:45 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:46 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:46 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:46 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:47 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:47 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:47 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:48 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:48 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:49 +0100] "GET /znz2ra.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:49 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:49 +0100] "GET /zc-729.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:50 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:50 +0100] "GET /kk.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:51 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:51 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:51 +0100] "GET /ghreshttryu.php HTTP/1.1" 301 162 "-" "-" 162.158.114.50 - - [09/Dec/2025:17:24:52 +0100] "GET /siln.php HTTP/1.1" 301 162 "-" "-" 172.70.223.6 - - [09/Dec/2025:17:50:54 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:55 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:56 +0100] "GET /.well-known/server.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:56 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:56 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.223 - - [09/Dec/2025:17:50:56 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:57 +0100] "GET /96i.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:57 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.223 - - [09/Dec/2025:17:50:57 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:57 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:58 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:58 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.223 - - [09/Dec/2025:17:50:58 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [09/Dec/2025:17:50:58 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.223 - - [09/Dec/2025:17:50:59 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:50:59 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:50:59 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:50:59 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:00 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:00 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:00 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:00 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:01 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:01 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:01 +0100] "GET /click.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:01 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:02 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:02 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:02 +0100] "GET /cord.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:02 +0100] "GET /core.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:03 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:03 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.6 - - [09/Dec/2025:17:51:03 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:03 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:04 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:04 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:04 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:04 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:05 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:05 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:05 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:05 +0100] "GET /images/nxc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:06 +0100] "GET /img/nxc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:06 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.6 - - [09/Dec/2025:17:51:06 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:06 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:07 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:07 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:07 +0100] "GET /log.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:07 +0100] "GET /lv.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:08 +0100] "GET /m.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:08 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:08 +0100] "GET /network_xo.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:08 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:09 +0100] "GET /nxc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:09 +0100] "GET /packed.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:09 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:09 +0100] "GET /rss.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [09/Dec/2025:17:51:10 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:10 +0100] "GET /system_log.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:10 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:10 +0100] "GET /upload/gpt-sh2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:11 +0100] "GET /we.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.6 - - [09/Dec/2025:17:51:11 +0100] "GET /worksec.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.151.200 - - [09/Dec/2025:18:56:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Apache-HttpClient/4.5.14 (Java/11.0.18)" 104.23.239.81 - - [09/Dec/2025:18:56:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 104.22.17.246 - - [09/Dec/2025:19:49:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:12 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:14 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:14 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:14 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:14 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:15 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:15 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:15 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:15 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:16 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:16 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:16 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:16 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:17 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:17 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:17 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:17 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:18 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:18 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:18 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:18 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:19 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:19 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:19 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:19 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:20 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:20 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:20 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:20 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:21 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:21 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:21 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:21 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:22 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:22 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:22 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:22 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [09/Dec/2025:19:55:23 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:23 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:23 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:23 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:24 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:24 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:24 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:24 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:25 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:25 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:25 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:25 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:26 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:26 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:26 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:26 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [09/Dec/2025:19:55:27 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [09/Dec/2025:19:55:27 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.246.150 - - [09/Dec/2025:20:03:48 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 108.162.246.150 - - [09/Dec/2025:20:03:48 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 108.162.246.150 - - [09/Dec/2025:20:03:49 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 108.162.246.150 - - [09/Dec/2025:20:03:49 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 108.162.246.150 - - [09/Dec/2025:20:03:49 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 108.162.246.150 - - [09/Dec/2025:20:03:49 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 108.162.246.150 - - [09/Dec/2025:20:03:49 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.71.144.20 - - [09/Dec/2025:20:26:39 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.68.35.168 - - [09/Dec/2025:21:33:23 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.68.35.168 - - [09/Dec/2025:21:33:23 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.35.168 - - [09/Dec/2025:21:33:23 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.35.168 - - [09/Dec/2025:21:33:24 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.35.168 - - [09/Dec/2025:21:33:24 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.35.168 - - [09/Dec/2025:21:33:24 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.68.35.168 - - [09/Dec/2025:21:33:24 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.69.136.165 - - [09/Dec/2025:22:49:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.249.115 - - [09/Dec/2025:23:23:49 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.69 - - [09/Dec/2025:23:23:49 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [09/Dec/2025:23:23:50 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [09/Dec/2025:23:23:50 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [09/Dec/2025:23:23:50 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:51 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:51 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:52 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:52 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:52 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:53 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:53 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:53 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:54 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:54 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:54 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:55 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:55 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:55 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:56 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:56 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:56 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:57 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:57 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:57 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:58 +0100] "GET /install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:58 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:23:58 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:23:59 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:23:23:59 +0100] "GET /network.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:00 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:00 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:00 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:01 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:01 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:01 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:02 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:02 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:02 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:03 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:03 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:03 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:04 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:04 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:04 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:05 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:05 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:05 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:06 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:06 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:06 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:07 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:07 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:07 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:08 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:08 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:08 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:09 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:09 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:09 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:10 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:10 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:10 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:11 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:11 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:11 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:23:24:12 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:12 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:12 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:13 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:13 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:13 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:14 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:14 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:14 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:15 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:15 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:16 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:16 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:16 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:17 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:17 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:17 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:18 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:18 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:18 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:19 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:19 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:19 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:20 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:20 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:21 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:21 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:21 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:22 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:22 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:23:24:22 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:23 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:23 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:23 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:24 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:24 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:24 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:25 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:23:24:25 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:25 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:26 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:26 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:26 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:27 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:27 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:27 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:28 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:23:24:28 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:29 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:29 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:29 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:30 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:30 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:30 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:31 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:31 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:31 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:23:24:32 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:32 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:32 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:33 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:33 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:33 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:34 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:34 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:34 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:35 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:35 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:35 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:36 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:36 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:36 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:37 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:37 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:37 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:38 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:38 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:38 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:39 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:39 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:39 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:40 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:40 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:40 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:41 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:41 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:41 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:42 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:42 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:42 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:43 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:43 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:44 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:44 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:44 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:45 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:45 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:45 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:46 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:46 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:46 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:47 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:47 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:47 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:48 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:48 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:48 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:49 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:49 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:49 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:50 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:50 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:50 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:51 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:51 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:51 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:52 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:52 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:52 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:53 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:53 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:53 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:54 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:54 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:54 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:55 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:55 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:55 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:56 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:56 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:56 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:57 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:57 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:57 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:58 +0100] "GET /system/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:23:24:58 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:58 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:24:59 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:59 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:24:59 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:23:25:00 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:00 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:00 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:01 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:01 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:01 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:02 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [09/Dec/2025:23:25:02 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:02 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:03 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:03 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:03 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:04 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:04 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:04 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:05 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:05 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:05 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:06 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:06 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:06 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:07 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:07 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:07 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:08 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:08 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:08 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:09 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:09 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:09 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:10 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:10 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:10 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:11 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:11 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:11 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:12 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:12 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:12 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:13 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:13 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:14 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:14 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:14 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [09/Dec/2025:23:25:15 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [09/Dec/2025:23:25:15 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.175.91 - - [10/Dec/2025:01:30:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 172.70.42.179 - - [10/Dec/2025:09:06:57 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 104.23.211.194 - - [10/Dec/2025:09:06:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.71.134.112 - - [10/Dec/2025:11:08:51 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 141.101.69.71 - - [10/Dec/2025:11:08:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 162.158.138.239 - - [10/Dec/2025:14:07:10 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:11 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:11 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:12 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:12 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:12 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:13 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:13 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:13 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:14 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [10/Dec/2025:14:07:14 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:14 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:15 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:15 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:15 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:16 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:16 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:16 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:17 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:17 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:17 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:18 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:18 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:18 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:19 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:19 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:19 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:20 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:20 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [10/Dec/2025:14:07:20 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:21 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:21 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:21 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:22 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:22 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:22 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:23 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:23 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:23 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:24 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:24 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:24 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:25 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:25 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:25 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:26 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:26 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:26 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:27 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:27 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:27 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:28 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:28 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:28 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:29 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:29 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [10/Dec/2025:14:07:29 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:30 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:30 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:30 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:31 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:31 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:31 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:32 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [10/Dec/2025:14:07:32 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:32 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:33 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:33 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:33 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:34 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:34 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:34 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:35 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:35 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:35 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [10/Dec/2025:14:07:36 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:36 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:36 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:37 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:37 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:37 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:38 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:38 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:38 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:39 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:39 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:39 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:40 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:40 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:40 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:41 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:41 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:41 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:42 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:42 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:42 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:43 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:43 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:43 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:44 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:44 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:44 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:45 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:45 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:45 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:46 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:46 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:46 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:47 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:47 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:47 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:48 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:48 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:48 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:49 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:49 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:49 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:50 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:50 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:50 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:51 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:51 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:51 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:52 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:52 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:52 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [10/Dec/2025:14:07:53 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:53 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:53 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:54 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:54 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:54 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:55 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:55 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:55 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:56 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [10/Dec/2025:14:07:56 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:56 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:57 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:57 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:07:57 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:58 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:58 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:58 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:59 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:07:59 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [10/Dec/2025:14:07:59 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:00 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:00 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:00 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:01 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:01 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:01 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:02 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:02 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:02 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:03 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:03 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:03 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:04 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:04 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:04 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:05 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:05 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:05 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:06 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:06 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:06 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:07 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:07 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:07 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:08 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:08 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:08 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:09 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:09 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:09 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:10 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:10 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:10 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:11 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:11 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:11 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:12 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:12 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:12 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:13 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:13 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:13 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:14 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:14 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:14 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:15 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:15 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:15 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:16 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:16 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:16 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:17 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:17 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:17 +0100] "GET /system/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:18 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:18 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:18 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:19 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:19 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:19 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:20 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:20 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:20 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:21 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:21 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:21 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:22 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:22 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:22 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:23 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:23 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:23 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:24 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:24 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:24 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:25 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:25 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:25 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:26 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:26 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [10/Dec/2025:14:08:26 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:27 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:27 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:27 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:28 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:28 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:28 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:29 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:29 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:29 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:30 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:30 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:30 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:31 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:31 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:31 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:32 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:32 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:32 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:33 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:33 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:33 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:34 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [10/Dec/2025:14:08:34 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [10/Dec/2025:14:08:34 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.22.142 - - [10/Dec/2025:14:14:30 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.41.23 - - [10/Dec/2025:14:17:21 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.195.107 - - [10/Dec/2025:15:47:36 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.99.228 - - [10/Dec/2025:15:58:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.147.174 - - [10/Dec/2025:16:19:15 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.71.147.174 - - [10/Dec/2025:16:19:15 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.71.147.174 - - [10/Dec/2025:16:19:15 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.71.147.174 - - [10/Dec/2025:16:19:15 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.71.147.174 - - [10/Dec/2025:16:19:15 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.71.147.174 - - [10/Dec/2025:16:19:15 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.71.147.174 - - [10/Dec/2025:16:19:16 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 108.162.241.13 - - [10/Dec/2025:17:01:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.2.87 - - [10/Dec/2025:18:04:38 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.3.34 - - [10/Dec/2025:18:04:38 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.68.3.34 - - [10/Dec/2025:18:04:38 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.68.3.34 - - [10/Dec/2025:18:04:38 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.3.34 - - [10/Dec/2025:18:04:38 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.3.34 - - [10/Dec/2025:18:04:38 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.68.3.34 - - [10/Dec/2025:18:04:38 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.70.42.179 - - [10/Dec/2025:20:01:50 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.175.110 - - [10/Dec/2025:21:31:25 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.97 - - [10/Dec/2025:21:31:26 +0100] "GET /404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:27 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:27 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:28 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:28 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:28 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.97 - - [10/Dec/2025:21:31:29 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.97 - - [10/Dec/2025:21:31:29 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.97 - - [10/Dec/2025:21:31:30 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.97 - - [10/Dec/2025:21:31:30 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:30 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.97 - - [10/Dec/2025:21:31:31 +0100] "GET /av.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.97 - - [10/Dec/2025:21:31:31 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:31 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:32 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:32 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.97 - - [10/Dec/2025:21:31:33 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:33 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:33 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:34 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:34 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:35 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:35 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:35 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:36 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:36 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:37 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:37 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:37 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:38 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:38 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:39 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:39 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:39 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.110 - - [10/Dec/2025:21:31:40 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:40 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:40 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:41 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:41 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:42 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:42 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:42 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:43 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:43 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:44 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:44 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:44 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:45 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:45 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:46 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:46 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:46 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:47 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:47 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:47 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:48 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:48 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:49 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [10/Dec/2025:21:31:49 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:49 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [10/Dec/2025:21:31:50 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.223.5 - - [10/Dec/2025:22:49:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.60.153 - - [11/Dec/2025:00:45:55 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:45:56 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:45:57 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [11/Dec/2025:00:45:57 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [11/Dec/2025:00:45:57 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:45:58 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:45:58 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:45:58 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:45:59 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:45:59 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:45:59 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:00 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:00 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:00 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:01 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:01 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:01 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:02 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:02 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:02 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:03 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:03 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:03 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:04 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:04 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:04 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:05 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:05 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:05 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [11/Dec/2025:00:46:06 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:06 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:07 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:07 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:07 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:08 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:08 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:08 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:09 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:09 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:09 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:10 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:10 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:10 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:11 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:11 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:11 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:12 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:12 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:12 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:13 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:13 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:13 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:14 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:14 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:14 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:15 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:15 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:15 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:16 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:16 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:16 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:17 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:17 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [11/Dec/2025:00:46:17 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:18 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [11/Dec/2025:00:46:18 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.232.80 - - [11/Dec/2025:02:38:01 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.225.87 - - [11/Dec/2025:02:38:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.92.156 - - [11/Dec/2025:04:37:35 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.92.156 - - [11/Dec/2025:04:37:36 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:36 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:36 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:37 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:37 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:38 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:38 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:39 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:39 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:39 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:40 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.92.156 - - [11/Dec/2025:04:37:40 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:41 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:41 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:41 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:42 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:42 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:43 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:43 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:43 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:44 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:44 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:45 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:45 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:46 +0100] "GET /item.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:46 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:46 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:47 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:47 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:48 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:48 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:48 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:49 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:49 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:50 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:50 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:51 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:51 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:51 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:52 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:52 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:53 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:53 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:53 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:54 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:54 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.92.156 - - [11/Dec/2025:04:37:55 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:55 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:55 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:56 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:56 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:57 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:57 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:58 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [11/Dec/2025:04:37:58 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:58 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:37:59 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.92.156 - - [11/Dec/2025:04:37:59 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:38:00 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:38:00 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [11/Dec/2025:04:38:00 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:41:37 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:01 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:02 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:02 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:08 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:13 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:13 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:14 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:14 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:14 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:23 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:23 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.123.75 - - [11/Dec/2025:04:42:23 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:23 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:24 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:24 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:24 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:25 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:25 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.123.75 - - [11/Dec/2025:04:42:26 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:26 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:26 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:27 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:27 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:28 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:28 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.123.75 - - [11/Dec/2025:04:42:28 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:29 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:29 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:29 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.123.75 - - [11/Dec/2025:04:42:33 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:38 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:38 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:38 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:39 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:39 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:39 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:40 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:40 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:40 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:46 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:46 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:47 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:47 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:48 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:48 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:48 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:49 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:49 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:50 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:50 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:42:50 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:57 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:59 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:42:59 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:00 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:00 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:00 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:01 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:01 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:01 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:02 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:02 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:05 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:05 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:05 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:09 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:09 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:11 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:11 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:11 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:12 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:14 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:15 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:15 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:16 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:16 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:16 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:18 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:19 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:19 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:19 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:20 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:20 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:20 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:21 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:21 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:22 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:23 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:23 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:23 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:35 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.123.75 - - [11/Dec/2025:04:43:36 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.123.75 - - [11/Dec/2025:04:43:36 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.186 - - [11/Dec/2025:05:52:08 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 162.158.162.41 - - [11/Dec/2025:06:34:14 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:15 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:15 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:16 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.163.250 - - [11/Dec/2025:06:34:16 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.163.250 - - [11/Dec/2025:06:34:17 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:17 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:17 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:18 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.163.250 - - [11/Dec/2025:06:34:18 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:19 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.163.250 - - [11/Dec/2025:06:34:19 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.163.250 - - [11/Dec/2025:06:34:19 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.163.250 - - [11/Dec/2025:06:34:20 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:20 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:21 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:21 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.163.250 - - [11/Dec/2025:06:34:21 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:22 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:22 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.163.250 - - [11/Dec/2025:06:34:23 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.250 - - [11/Dec/2025:06:34:23 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:23 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:24 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.162.41 - - [11/Dec/2025:06:34:24 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:25 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:25 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:25 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:26 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:26 +0100] "GET /images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:27 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:27 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:28 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:28 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:28 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:29 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:29 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:30 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:30 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:30 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:31 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:31 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.162.41 - - [11/Dec/2025:06:34:32 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:32 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:32 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.162.41 - - [11/Dec/2025:06:34:33 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:33 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:34 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:34 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:35 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:35 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:35 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:36 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.162.41 - - [11/Dec/2025:06:34:36 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:37 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.41 - - [11/Dec/2025:06:34:37 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:37 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:38 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.162.41 - - [11/Dec/2025:06:34:38 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:39 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:39 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.41 - - [11/Dec/2025:06:34:39 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:14 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:15 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:16 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:16 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:16 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.164.36 - - [11/Dec/2025:08:05:17 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:17 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:18 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:18 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:19 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:19 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:20 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:20 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:21 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:21 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:21 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:22 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:22 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:23 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:23 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:24 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:24 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:25 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:25 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:27 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:27 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:28 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:28 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:29 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:29 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:30 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:30 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:31 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:31 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:32 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:32 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:33 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:34 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:35 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:35 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:36 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:36 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:37 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:37 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:37 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.164.36 - - [11/Dec/2025:08:05:38 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:38 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:39 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:39 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:40 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:40 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:40 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:41 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:41 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:42 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:42 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:43 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:43 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:43 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:44 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:44 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:45 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:45 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [11/Dec/2025:08:05:46 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:46 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [11/Dec/2025:08:05:47 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.35.153 - - [11/Dec/2025:09:00:35 +0100] "GET /images/pronat/TueJun3014092520209822.xlsx HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 172.70.42.178 - - [11/Dec/2025:09:00:36 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:39 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.102 - - [11/Dec/2025:09:46:40 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.102 - - [11/Dec/2025:09:46:41 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.189.102 - - [11/Dec/2025:09:46:41 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.102 - - [11/Dec/2025:09:46:42 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.189.102 - - [11/Dec/2025:09:46:42 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.189.102 - - [11/Dec/2025:09:46:42 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.189.102 - - [11/Dec/2025:09:46:43 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.102 - - [11/Dec/2025:09:46:43 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.189.102 - - [11/Dec/2025:09:46:44 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.102 - - [11/Dec/2025:09:46:44 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.189.102 - - [11/Dec/2025:09:46:44 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:45 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:45 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:46 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:46 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:47 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:47 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:47 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:48 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:48 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:49 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:49 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:50 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:50 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:50 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:51 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:51 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:52 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:52 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:53 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:53 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:54 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:54 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:54 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:55 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:55 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:56 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:56 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:57 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:57 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:57 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:58 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.188.17 - - [11/Dec/2025:09:46:58 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:46:59 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:46:59 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:47:00 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:47:00 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:47:00 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:47:01 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:47:01 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:47:02 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:47:02 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:47:03 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:47:03 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.188.17 - - [11/Dec/2025:09:47:03 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:47:04 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:47:04 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [11/Dec/2025:09:47:05 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:47:05 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [11/Dec/2025:09:47:06 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.188.17 - - [11/Dec/2025:09:47:06 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.94.172 - - [11/Dec/2025:11:45:05 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.170.151 - - [11/Dec/2025:11:45:05 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.64.215.12 - - [11/Dec/2025:13:21:31 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.192 - - [11/Dec/2025:13:21:31 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.192 - - [11/Dec/2025:13:21:32 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.192 - - [11/Dec/2025:13:21:32 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.192 - - [11/Dec/2025:13:21:32 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.192 - - [11/Dec/2025:13:21:32 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.192 - - [11/Dec/2025:13:21:33 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.192 - - [11/Dec/2025:13:21:33 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:33 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:33 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:34 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:34 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:34 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:34 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:35 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:35 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:35 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:35 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:36 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:36 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:36 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:36 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:37 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:37 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:37 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:37 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:38 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:38 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:38 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:38 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:39 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:39 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:39 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:39 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:40 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:40 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:40 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:41 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:41 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:41 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:41 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:42 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:42 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:42 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:42 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.12 - - [11/Dec/2025:13:21:43 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:43 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:43 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:43 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:44 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:44 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:44 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:44 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:45 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:45 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:45 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:45 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:46 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:46 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:46 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:46 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:47 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:47 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:47 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.12 - - [11/Dec/2025:13:21:47 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.12 - - [11/Dec/2025:13:21:48 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:42:39 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:40 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:41 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:41 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:41 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:42 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:42 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:42 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:43 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:43 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:44 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:44 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:44 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:45 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:45 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:46 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:46 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:46 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:47 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:47 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:48 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:42:48 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:49 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:49 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:50 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:50 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:50 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:51 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:52 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:52 +0100] "GET /network.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:52 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:53 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:53 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:53 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:54 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:54 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:54 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:55 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:55 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:56 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:42:57 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:57 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:57 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:42:57 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:58 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:58 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:58 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:42:59 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:00 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:43:00 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:00 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:01 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:01 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:01 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:02 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:02 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:02 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:03 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:03 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:03 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:03 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:04 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:05 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:05 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:05 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:06 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:06 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:07 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:07 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:07 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:07 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:08 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:08 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:08 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:09 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:12 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:12 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:12 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:13 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:13 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:13 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:14 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:14 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:14 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:43:15 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:15 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:15 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:16 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:16 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:16 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:17 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:17 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:17 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:17 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:18 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:18 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:19 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:19 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:19 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:19 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:20 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:20 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:20 +0100] "GET /item.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:21 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:21 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:22 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:22 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:22 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:23 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:23 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:23 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:24 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:25 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:25 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:25 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:26 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:26 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:26 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:27 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:27 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:27 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:28 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:28 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:28 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:29 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:29 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:29 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:43:30 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:30 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:30 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:31 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:31 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:31 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:32 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:32 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:32 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:32 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:33 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:33 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:33 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:34 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:34 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:34 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:35 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:35 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:35 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:35 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:36 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:36 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:36 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:37 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:37 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:37 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:38 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:38 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:43:38 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:39 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:39 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:39 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:39 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:40 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:40 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:40 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:41 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:41 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:41 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:42 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:42 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:42 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:43 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:43 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:43 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:44 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:44 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:43:44 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:45 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:45 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:45 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:46 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:46 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:46 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:46 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:47 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:47 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:48 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:48 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:43:48 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:48 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:49 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:49 +0100] "GET /images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:49 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:50 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:50 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:50 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:51 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:51 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:51 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:51 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:52 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:52 +0100] "GET /system/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:52 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:53 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:53 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:54 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:54 +0100] "GET /include/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:54 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:54 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:55 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:55 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:56 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:56 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:56 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:56 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:57 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:57 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:57 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:58 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:58 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:43:59 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [11/Dec/2025:14:43:59 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:59 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:43:59 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:00 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:00 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:00 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:01 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:01 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:01 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:02 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:02 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:02 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:03 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:03 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:03 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:04 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:04 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:04 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:05 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:05 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:06 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:06 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:07 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:07 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:07 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:08 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:08 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:09 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:09 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [11/Dec/2025:14:44:09 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:10 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [11/Dec/2025:14:44:10 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.23.43 - - [11/Dec/2025:15:07:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.167.129 - - [11/Dec/2025:15:07:34 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:15 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [11/Dec/2025:15:25:16 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [11/Dec/2025:15:25:16 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [11/Dec/2025:15:25:16 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [11/Dec/2025:15:25:17 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [11/Dec/2025:15:25:17 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [11/Dec/2025:15:25:17 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [11/Dec/2025:15:25:18 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [11/Dec/2025:15:25:18 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [11/Dec/2025:15:25:18 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [11/Dec/2025:15:25:19 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [11/Dec/2025:15:25:19 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:19 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:20 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:20 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:20 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [11/Dec/2025:15:25:21 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:21 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:21 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:22 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:22 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:22 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:23 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:23 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:23 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:24 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:24 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:24 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:25 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:25 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [11/Dec/2025:15:25:25 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:26 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:26 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:26 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:27 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:27 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:27 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:28 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [11/Dec/2025:15:25:28 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [11/Dec/2025:15:25:28 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:28 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:29 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:29 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:29 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:30 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:30 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:30 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:31 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:31 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:31 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:32 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:32 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:32 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:33 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:33 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:33 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:34 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [11/Dec/2025:15:25:34 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:34 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:35 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:35 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:35 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:36 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:36 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:15:25:36 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:15:25:37 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.160 - - [11/Dec/2025:16:04:53 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:54 +0100] "GET /footer.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:55 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:55 +0100] "GET /abe.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:56 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:56 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:56 +0100] "GET /index1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:57 +0100] "GET /lock6.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:57 +0100] "GET /news.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:57 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:58 +0100] "GET /css/plugins.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:58 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:58 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:59 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:59 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:04:59 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:00 +0100] "GET /ok.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:00 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:00 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:01 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:01 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:02 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:02 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:02 +0100] "GET /hoot.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:03 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:03 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:03 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:04 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:04 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:04 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:05 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:05 +0100] "GET /geju.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:05 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:06 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:06 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:07 +0100] "GET /contact.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:07 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:07 +0100] "GET /lufix.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:08 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:08 +0100] "GET /cloud.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:09 +0100] "GET /shell20211028.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:09 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:09 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:10 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:10 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:10 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:11 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:11 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:12 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [11/Dec/2025:16:05:12 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.71.195.107 - - [11/Dec/2025:16:18:09 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.172.87 - - [11/Dec/2025:17:39:59 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.87.61 - - [11/Dec/2025:17:40:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.151.199 - - [11/Dec/2025:18:01:41 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.23.239.80 - - [11/Dec/2025:18:01:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:35 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.138 - - [11/Dec/2025:18:05:35 +0100] "GET /num.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.138 - - [11/Dec/2025:18:05:36 +0100] "GET /www.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.138 - - [11/Dec/2025:18:05:36 +0100] "GET /includes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:36 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:37 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:37 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:37 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:38 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:38 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:38 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:39 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:39 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:39 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:40 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:40 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:40 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:41 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:41 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:41 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:42 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:42 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:42 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:43 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:43 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:43 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:18:05:44 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:44 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:44 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:45 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:45 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:45 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:46 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:46 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:46 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:47 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:18:05:47 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:47 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:47 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:48 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:48 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:48 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:49 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:49 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:49 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:50 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:50 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:50 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:51 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:51 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:51 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:52 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:52 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:52 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:53 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:53 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:53 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:18:05:54 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:54 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:54 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:55 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:55 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:18:05:55 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:56 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:18:05:56 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:56 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:57 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:18:05:57 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.42.179 - - [11/Dec/2025:19:27:14 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.249.115 - - [11/Dec/2025:20:37:59 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [11/Dec/2025:20:38:00 +0100] "GET /num.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [11/Dec/2025:20:38:00 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [11/Dec/2025:20:38:01 +0100] "GET /includes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [11/Dec/2025:20:38:02 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.69 - - [11/Dec/2025:20:38:02 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [11/Dec/2025:20:38:02 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.69 - - [11/Dec/2025:20:38:02 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.69 - - [11/Dec/2025:20:38:03 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [11/Dec/2025:20:38:03 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.69 - - [11/Dec/2025:20:38:03 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.69 - - [11/Dec/2025:20:38:04 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:04 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:04 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:05 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:05 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:05 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:06 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:06 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:06 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:07 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:07 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:07 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:08 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:08 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:08 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:09 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:09 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:09 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:10 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:10 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:10 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:11 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:11 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:11 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:12 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:12 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:12 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:13 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:13 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:13 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:14 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:14 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:14 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:15 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:15 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:15 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:16 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:16 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:16 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:17 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:17 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:17 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:18 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:18 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:18 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:19 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:19 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:19 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:20 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:20 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:20 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:21 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:21 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:21 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:22 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [11/Dec/2025:20:38:22 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [11/Dec/2025:20:38:22 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.221.111 - - [11/Dec/2025:22:42:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.166.67 - - [11/Dec/2025:23:31:39 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:41 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:42 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:43 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:44 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:44 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:45 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:45 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:46 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:46 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:47 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:47 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:31:48 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:48 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:49 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:50 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:50 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:51 +0100] "GET /css/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:51 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:52 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:52 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:53 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:53 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:54 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:54 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:55 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:31:55 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:56 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:31:57 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:58 +0100] "GET /network.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:58 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:59 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:31:59 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:07 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:08 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:09 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:09 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:10 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:10 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:11 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:11 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:12 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:12 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:13 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:32:13 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:14 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:15 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:15 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:15 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:16 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:32:16 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:32:17 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:17 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:18 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:19 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:32:20 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:20 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:21 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:21 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:22 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:22 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:23 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:23 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:24 +0100] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:25 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:25 +0100] "GET /wp-includes/class-wp-locale-switcher-less.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:26 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:26 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:27 +0100] "GET /wp-includes/customize/class-wp-customize-media-icon-control.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:27 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:28 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:29 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:30 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:32:30 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:31 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:31 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:32 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:32 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:33 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:33 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:34 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:35 +0100] "GET /wp-includes/wp-db-array.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:35 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:36 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:36 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:32:37 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:37 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:38 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:38 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:32:39 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:40 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:40 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:41 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:41 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:42 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:43 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:43 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:44 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:44 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:45 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:46 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:46 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:47 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:32:47 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:49 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:50 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:50 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:50 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:51 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:51 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:52 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:53 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:53 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:54 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:54 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:55 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:55 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:56 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:56 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:57 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:58 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:32:58 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:59 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:32:59 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:00 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:00 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:33:01 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:02 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:02 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:03 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:03 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:04 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:04 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:05 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:05 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:06 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:07 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:07 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:07 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:08 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:33:09 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:09 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:11 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:11 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:11 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:12 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:13 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:13 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:14 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:14 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:15 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:15 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:16 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:16 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:17 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:18 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:18 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:33:19 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:20 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:20 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:21 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:21 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:22 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:22 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:23 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:33:24 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:24 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:25 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:26 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:26 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:27 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:27 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:28 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:28 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:29 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:29 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:30 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:30 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:31 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:31 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:32 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:32 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:33 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:33 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:34 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:34 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:33:35 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:35 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:36 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:36 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:37 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:37 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:38 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:39 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:39 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:40 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:40 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:41 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:41 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:42 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:43 +0100] "GET /system/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:43 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:33:44 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:44 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:44 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:45 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:46 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:46 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:47 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:47 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:49 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:33:49 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:50 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:50 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:51 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:51 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:52 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:53 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:53 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:54 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:55 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:55 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:56 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:57 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:57 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:58 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:33:59 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:33:59 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:34:00 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:00 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [11/Dec/2025:23:34:01 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:01 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:02 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:02 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:34:03 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:03 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:04 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:05 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:05 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:34:06 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:06 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:07 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:24 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:24 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:25 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:26 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:34:26 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:26 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:34:27 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [11/Dec/2025:23:34:27 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:28 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [11/Dec/2025:23:34:28 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:43 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:43 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:23:50:44 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:44 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:45 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:45 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:45 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:46 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:46 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:46 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:23:50:47 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:47 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:23:50:47 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:48 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:48 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:48 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:49 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:49 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:49 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:50 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:50 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:50 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:50 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:51 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:51 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:51 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:52 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:52 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:52 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:53 +0100] "GET /images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:53 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:23:50:53 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:54 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:54 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:55 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:55 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:55 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:55 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:56 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:56 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:56 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:57 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:57 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:57 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:58 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:58 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:50:58 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:59 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:23:50:59 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:50:59 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:51:00 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:51:00 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:51:00 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:51:01 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:51:01 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [11/Dec/2025:23:51:01 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:51:02 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:51:02 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:51:02 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:51:03 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [11/Dec/2025:23:51:03 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [11/Dec/2025:23:51:03 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.245.150 - - [12/Dec/2025:00:07:44 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 108.162.245.150 - - [12/Dec/2025:00:07:44 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 108.162.245.150 - - [12/Dec/2025:00:07:44 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 108.162.245.150 - - [12/Dec/2025:00:07:44 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 108.162.245.150 - - [12/Dec/2025:00:07:44 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 108.162.245.150 - - [12/Dec/2025:00:07:45 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 108.162.245.150 - - [12/Dec/2025:00:07:45 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 162.158.119.39 - - [12/Dec/2025:01:32:33 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.119.39 - - [12/Dec/2025:01:32:33 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.119.39 - - [12/Dec/2025:01:32:34 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.39 - - [12/Dec/2025:01:32:34 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.39 - - [12/Dec/2025:01:32:34 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.39 - - [12/Dec/2025:01:32:34 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.2.86 - - [12/Dec/2025:01:58:02 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.68.3.34 - - [12/Dec/2025:01:58:02 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.68.3.34 - - [12/Dec/2025:01:58:02 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.68.3.34 - - [12/Dec/2025:01:58:02 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.68.3.34 - - [12/Dec/2025:01:58:02 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.68.3.34 - - [12/Dec/2025:01:58:02 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.3.34 - - [12/Dec/2025:01:58:02 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.71.241.113 - - [12/Dec/2025:02:35:15 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.172.106 - - [12/Dec/2025:03:45:35 +0100] "GET /de/impressum HTTP/1.1" 301 162 "-" "DomainCollector/1.0 (Legal Research Bot; +https://example.com/bot)" 162.158.94.200 - - [12/Dec/2025:03:45:35 +0100] "GET /impressum HTTP/1.1" 301 162 "-" "DomainCollector/1.0 (Legal Research Bot; +https://example.com/bot)" 172.71.172.107 - - [12/Dec/2025:03:45:35 +0100] "GET /imprint HTTP/1.1" 301 162 "-" "DomainCollector/1.0 (Legal Research Bot; +https://example.com/bot)" 172.70.240.205 - - [12/Dec/2025:03:45:35 +0100] "GET /rechtliches HTTP/1.1" 301 162 "-" "DomainCollector/1.0 (Legal Research Bot; +https://example.com/bot)" 162.158.94.200 - - [12/Dec/2025:03:45:35 +0100] "GET /impressum/ HTTP/1.1" 301 162 "-" "DomainCollector/1.0 (Legal Research Bot; +https://example.com/bot)" 162.158.111.90 - - [12/Dec/2025:03:45:35 +0100] "GET /legal-notice HTTP/1.1" 301 162 "-" "DomainCollector/1.0 (Legal Research Bot; +https://example.com/bot)" 162.159.110.2 - - [12/Dec/2025:04:23:12 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:50 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:50 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:50 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:51 +0100] "GET /includes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:23:51 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:23:51 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:51 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:52 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:52 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:52 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:52 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:53 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:23:53 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:53 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:23:54 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:54 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:54 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:23:54 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:55 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:55 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:23:55 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:23:55 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:56 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:56 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:56 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:56 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:57 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:57 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:57 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:57 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:58 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:58 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:58 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:23:59 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:59 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:23:59 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:23:59 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:00 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:24:00 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:00 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:00 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:01 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:24:01 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [12/Dec/2025:04:24:01 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:01 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:02 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:24:02 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:24:02 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:02 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:24:03 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:03 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:24:03 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:03 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:24:04 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:04 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:04 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:04 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:05 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [12/Dec/2025:04:24:05 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:05 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [12/Dec/2025:04:24:05 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:06 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [12/Dec/2025:04:24:06 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:06 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Dec/2025:04:24:06 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:07 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:07 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Dec/2025:04:24:07 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:32 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:35 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:35 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:35 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:36 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:37 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:37 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:38 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [12/Dec/2025:06:17:38 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:38 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:39 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:39 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:40 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:40 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:42 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:42 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:43 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:43 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:43 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:44 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [12/Dec/2025:06:17:45 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:46 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:46 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:47 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:48 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:48 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:49 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:49 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:50 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:51 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:51 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [12/Dec/2025:06:17:52 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:52 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:53 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:54 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [12/Dec/2025:06:17:54 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:54 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:55 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:55 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:56 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:56 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [12/Dec/2025:06:17:57 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:58 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:17:58 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:59 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:17:59 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:00 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:00 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [12/Dec/2025:06:18:01 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:01 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:02 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:03 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:03 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:04 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:04 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:05 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:05 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:06 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:06 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:07 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:07 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:07 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:08 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:08 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:09 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:09 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:10 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:10 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:11 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:12 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:12 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:13 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:14 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [12/Dec/2025:06:18:14 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:15 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:16 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:16 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:17 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:17 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:18 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:18 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:19 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:19 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:20 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:20 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:21 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:22 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:23 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:23 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:24 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:35 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:35 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:36 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:37 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:38 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:38 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:39 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:39 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:40 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:40 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:41 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:41 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:41 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:42 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:42 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:43 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:43 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:44 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:44 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:45 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:46 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [12/Dec/2025:06:18:46 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:47 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:47 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [12/Dec/2025:06:18:48 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [12/Dec/2025:07:02:37 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [12/Dec/2025:07:02:37 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [12/Dec/2025:07:02:38 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [12/Dec/2025:07:02:38 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [12/Dec/2025:07:02:39 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [12/Dec/2025:07:02:39 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:39 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:39 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:40 +0100] "GET /www.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:40 +0100] "GET /includes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:40 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:41 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:41 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:41 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:42 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:42 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:42 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:43 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:43 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:43 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:44 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:44 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:44 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:45 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:45 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:45 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:45 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:46 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:46 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:46 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:47 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:47 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:47 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:48 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:48 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:48 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:49 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:49 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:49 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:50 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:50 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:51 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:51 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:52 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:52 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:52 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:53 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:53 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:53 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:53 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:54 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:54 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:54 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [12/Dec/2025:07:43:55 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:55 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:55 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:56 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:56 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:56 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:57 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:57 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:57 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:58 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:58 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [12/Dec/2025:07:43:58 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:59 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:43:59 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:43:59 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:44:00 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:44:00 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:44:00 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:44:01 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Dec/2025:07:44:01 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Dec/2025:07:44:01 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.158.188 - - [12/Dec/2025:09:31:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.94.172 - - [12/Dec/2025:10:09:08 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.223.5 - - [12/Dec/2025:11:06:26 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [12/Dec/2025:11:06:26 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [12/Dec/2025:11:06:27 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [12/Dec/2025:11:06:27 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.223 - - [12/Dec/2025:11:06:27 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.223 - - [12/Dec/2025:11:06:27 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.223 - - [12/Dec/2025:11:06:28 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:28 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:28 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:28 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:29 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:29 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:29 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:30 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:30 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:30 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:30 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:31 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:31 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:31 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [12/Dec/2025:11:06:31 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:32 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:32 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:32 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:33 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:33 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [12/Dec/2025:11:06:33 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:33 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:34 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:34 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:34 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:34 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:35 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:35 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:35 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:36 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:36 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:36 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:36 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:37 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:37 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:37 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:37 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:38 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:38 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:38 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:38 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:39 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:39 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:39 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:40 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:40 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:40 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:40 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:41 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:41 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [12/Dec/2025:11:06:41 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:41 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:42 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:42 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:42 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [12/Dec/2025:11:06:42 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:43 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:43 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:43 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:44 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:44 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:44 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:44 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:45 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:45 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:45 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:45 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:46 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:46 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:46 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:47 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:47 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:47 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:47 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:48 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:48 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:48 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:48 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:49 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:49 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:49 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:50 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:50 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:50 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:50 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:51 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:51 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:51 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [12/Dec/2025:11:06:51 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:52 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:52 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:52 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:52 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:53 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:53 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:53 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:54 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:54 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [12/Dec/2025:11:06:54 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:54 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:55 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:55 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:55 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [12/Dec/2025:11:06:56 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [12/Dec/2025:11:06:56 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:56 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:56 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:57 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [12/Dec/2025:11:06:57 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:14 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:15 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:15 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:16 +0100] "GET /includes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:16 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:16 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:17 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:17 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:17 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:18 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:18 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:18 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [12/Dec/2025:11:08:19 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:19 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:19 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:20 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:20 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:20 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:21 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:21 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:21 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:22 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:22 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:22 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:23 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:23 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:23 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:24 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:24 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:24 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:25 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:25 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:25 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:26 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:26 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:26 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:27 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:27 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:27 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:28 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:28 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:28 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:29 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:29 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:29 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:30 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:30 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [12/Dec/2025:11:08:30 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [12/Dec/2025:11:08:31 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:31 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:31 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:31 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:32 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [12/Dec/2025:11:08:32 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:32 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:33 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:33 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:33 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:34 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:34 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:34 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:35 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:35 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:35 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:36 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:36 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [12/Dec/2025:11:08:36 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [12/Dec/2025:11:08:37 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [12/Dec/2025:12:43:52 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.135.17 - - [12/Dec/2025:13:21:47 +0100] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" 162.158.39.198 - - [12/Dec/2025:14:39:43 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.39.181 - - [12/Dec/2025:14:39:44 +0100] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.181 - - [12/Dec/2025:14:39:44 +0100] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 162 "-" "-" 162.158.39.181 - - [12/Dec/2025:14:39:45 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "-" "-" 162.158.39.181 - - [12/Dec/2025:14:39:45 +0100] "GET /wp-includes/js/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.181 - - [12/Dec/2025:14:39:45 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.181 - - [12/Dec/2025:14:39:46 +0100] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:46 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:47 +0100] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:47 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:47 +0100] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:48 +0100] "GET /wp-admin/network/chosen.php/wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:49 +0100] "GET /Assets/item.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:49 +0100] "GET /shop/lock.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:49 +0100] "GET /th/plugins/phpThumb/404.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:50 +0100] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:50 +0100] "GET /files/log.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:50 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:51 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:51 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:51 +0100] "GET /wp-includes/block-patterns/vuln.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:52 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:52 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:52 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:53 +0100] "GET /images/404.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:53 +0100] "GET /wp-content/languages/asus.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:54 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:54 +0100] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:54 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:55 +0100] "GET /12wudscz.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:55 +0100] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:55 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:56 +0100] "GET /wp-content/plugins/background-image-cropper/plugins.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:56 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:56 +0100] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:57 +0100] "GET /wp-admin/images/users.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:58 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:58 +0100] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:58 +0100] "GET /index/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:59 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:59 +0100] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:39:59 +0100] "GET /wp-admin/user/content.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:00 +0100] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:00 +0100] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:01 +0100] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:01 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:01 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:02 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:02 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:02 +0100] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:03 +0100] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:03 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:04 +0100] "GET /wp-includes/Requests/Response/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:04 +0100] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:04 +0100] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:05 +0100] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:05 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:05 +0100] "GET /wp-mail.php/wp-includes/ID3/wp-mail.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:06 +0100] "GET /wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:06 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:06 +0100] "GET /wp-content/themes/file.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:07 +0100] "GET /css/item.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:07 +0100] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:07 +0100] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:08 +0100] "GET /assets/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:08 +0100] "GET /css/xp.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:08 +0100] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:09 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:09 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:10 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:10 +0100] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:10 +0100] "GET /js/style.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:11 +0100] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:11 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:12 +0100] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:12 +0100] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:12 +0100] "GET /.well-known/dropdown.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:13 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:13 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:13 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:14 +0100] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:14 +0100] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:14 +0100] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:15 +0100] "GET /wp-admin/user/bak.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:15 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:15 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:16 +0100] "GET /wp-admin/date.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:16 +0100] "GET /index/x.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:16 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:17 +0100] "GET /.well-known/.well-known/cc.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:17 +0100] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:17 +0100] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:18 +0100] "GET /css/cong.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:18 +0100] "GET /wp-includes/customize/shell.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:18 +0100] "GET /wp-content/mah.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:19 +0100] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:19 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:19 +0100] "GET /cgi-bin/fm.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:20 +0100] "GET /wp-includes/block-supports/variations.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:20 +0100] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:20 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:21 +0100] "GET /wp-content/languages/link.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:21 +0100] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:21 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:22 +0100] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:22 +0100] "GET /wp-includes/fonts/item.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:22 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:23 +0100] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:23 +0100] "GET /wp-content/plugins/seoplugins/wso112233.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:23 +0100] "GET /wp-includes/sodium_compat/link.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:24 +0100] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [12/Dec/2025:14:40:24 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.68.210.161 - - [12/Dec/2025:16:22:03 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.200 - - [12/Dec/2025:16:22:03 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.200 - - [12/Dec/2025:16:22:04 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.200 - - [12/Dec/2025:16:22:04 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.200 - - [12/Dec/2025:16:22:05 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.200 - - [12/Dec/2025:16:22:05 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.200 - - [12/Dec/2025:16:22:05 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.200 - - [12/Dec/2025:16:22:06 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.200 - - [12/Dec/2025:16:22:06 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.200 - - [12/Dec/2025:16:22:06 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.161 - - [12/Dec/2025:16:22:07 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:07 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:07 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:08 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:08 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:09 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:09 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:09 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:10 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:10 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:10 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:11 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:11 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:11 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:12 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:12 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:12 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:13 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:13 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:13 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:14 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:14 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:15 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:15 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:15 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:16 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:16 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:16 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:17 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:17 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:17 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.161 - - [12/Dec/2025:16:22:18 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:18 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:18 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:19 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:19 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:19 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:20 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:20 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:20 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:21 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.161 - - [12/Dec/2025:16:22:21 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:21 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:22 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:22 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:22 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:23 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:23 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:24 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:24 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:24 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:25 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:25 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:25 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:26 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:26 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:26 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:27 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:27 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:27 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:28 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:28 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:28 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:29 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:29 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:29 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:30 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:30 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:30 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:31 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:31 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:31 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:32 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:32 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:33 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:33 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:33 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:34 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:34 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:34 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:35 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:35 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:35 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:36 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:36 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:37 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:37 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.161 - - [12/Dec/2025:16:22:37 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:38 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:38 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:38 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:39 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:39 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:39 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:40 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:40 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:40 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:41 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:41 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.161 - - [12/Dec/2025:16:22:42 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:42 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:42 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:43 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:43 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.161 - - [12/Dec/2025:16:22:43 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.158.188 - - [12/Dec/2025:17:00:52 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.175.111 - - [12/Dec/2025:17:13:03 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 104.23.175.97 - - [12/Dec/2025:17:13:05 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 104.23.175.97 - - [12/Dec/2025:17:13:05 +0100] "GET /tesTyuj.php HTTP/1.1" 301 162 "-" "-" 104.23.175.97 - - [12/Dec/2025:17:13:07 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 104.23.175.97 - - [12/Dec/2025:17:13:08 +0100] "GET /ww3.php HTTP/1.1" 301 162 "-" "-" 104.23.175.97 - - [12/Dec/2025:17:13:08 +0100] "GET /clss.php HTTP/1.1" 301 162 "-" "-" 104.23.175.97 - - [12/Dec/2025:17:13:09 +0100] "GET /budmachine/web/s.php?p= HTTP/1.1" 301 162 "-" "-" 104.23.175.97 - - [12/Dec/2025:17:13:10 +0100] "GET /wp-64wscx6shd.php HTTP/1.1" 301 162 "-" "-" 104.23.175.97 - - [12/Dec/2025:17:13:12 +0100] "GET /okxh.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:12 +0100] "GET /wp-sid.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:13 +0100] "GET /6kUgr4yGzxN.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:13 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:14 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:15 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:15 +0100] "GET /wp-title.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:17 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:18 +0100] "GET /wp-home.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:18 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:19 +0100] "GET /atex1.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:20 +0100] "GET /kdgok.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:21 +0100] "GET /vanda.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:21 +0100] "GET /bolt.php?p= HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:23 +0100] "GET /sid-file.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:24 +0100] "GET /l3gi0n.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:24 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:25 +0100] "GET /bo.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:25 +0100] "GET /d12.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:26 +0100] "GET /Contrller.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:27 +0100] "GET /o2.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:28 +0100] "GET /error_log.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:29 +0100] "GET /inghl.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:29 +0100] "GET /wp-securitiy.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:30 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:31 +0100] "GET /wp-ac.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:31 +0100] "GET /z60.php?p= HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:33 +0100] "GET /krypton.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:33 +0100] "GET /karma_57c3d4.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:34 +0100] "GET /fc72f.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:35 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:35 +0100] "GET /jjrpo.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:36 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:36 +0100] "GET /wp-advaced.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:37 +0100] "GET /asd.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:38 +0100] "GET /xtt.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:38 +0100] "GET /s.php?p= HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [12/Dec/2025:17:13:39 +0100] "GET /t.php?p= HTTP/1.1" 301 162 "-" "-" 172.64.198.196 - - [12/Dec/2025:17:20:02 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 172.71.147.173 - - [12/Dec/2025:17:36:10 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.71.147.181 - - [12/Dec/2025:17:36:10 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.71.147.181 - - [12/Dec/2025:17:36:10 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.71.147.181 - - [12/Dec/2025:17:36:10 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.71.147.181 - - [12/Dec/2025:17:36:10 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.71.147.181 - - [12/Dec/2025:17:36:10 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.71.147.181 - - [12/Dec/2025:17:36:11 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.210.160 - - [12/Dec/2025:18:30:42 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:46 +0100] "GET /neshe HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:46 +0100] "GET /1.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:47 +0100] "GET /t.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:49 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:51 +0100] "GET /file.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:51 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:52 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:52 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:52 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:54 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:54 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:55 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:55 +0100] "GET /inputs.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:57 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:57 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:58 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:58 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:59 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:30:59 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:01 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:02 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:02 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:03 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:03 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:03 +0100] "GET /1.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:04 +0100] "GET /about/function.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:05 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:05 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:06 +0100] "GET /chosen.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:06 +0100] "GET /wp-cron.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:06 +0100] "GET /yanz.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:07 +0100] "GET /config.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:07 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:08 +0100] "GET /wp-2019.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:09 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:10 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:10 +0100] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:10 +0100] "GET /tiny.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:11 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:11 +0100] "GET /mail.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:11 +0100] "GET /wp-includes/system_log.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:12 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:12 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:13 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:13 +0100] "GET /wp-content/themes/wp-pridmag/init.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:13 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:14 +0100] "GET /plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:15 +0100] "GET /wp-configs.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:17 +0100] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:18 +0100] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:18 +0100] "GET /wp-includes/rest-api/fields/index.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:18 +0100] "GET /index/fucku.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:19 +0100] "GET /upload/wp-info.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:19 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:20 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:22 +0100] "GET /loads.PhP HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:22 +0100] "GET /mj.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:23 +0100] "GET /dichku.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:23 +0100] "GET /zsz.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:23 +0100] "GET /h2a2ck.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:24 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:24 +0100] "GET /fs6.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:25 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:25 +0100] "GET /byp8.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:25 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:26 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:26 +0100] "GET /trplv.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:27 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:27 +0100] "GET /wa.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:27 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:28 +0100] "GET /1.php? HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:28 +0100] "GET /mc.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:29 +0100] "GET /article.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:29 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:29 +0100] "GET /ff.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:30 +0100] "GET /if.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:30 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:31 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:32 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:32 +0100] "GET /avaa.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:32 +0100] "GET /yanz.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:33 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:33 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "-" 172.68.210.160 - - [12/Dec/2025:18:31:33 +0100] "GET /wp-includes/js/js420.php HTTP/1.1" 301 162 "-" "-" 104.22.10.193 - - [12/Dec/2025:18:40:14 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.68.2.87 - - [12/Dec/2025:20:46:21 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.3.34 - - [12/Dec/2025:20:46:21 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.68.3.34 - - [12/Dec/2025:20:46:21 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.3.34 - - [12/Dec/2025:20:46:21 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.68.3.34 - - [12/Dec/2025:20:46:21 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.68.3.34 - - [12/Dec/2025:20:46:21 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.68.3.34 - - [12/Dec/2025:20:46:21 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:27 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:29 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:29 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:29 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:30 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:30 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:30 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:30 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:31 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:31 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:31 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [12/Dec/2025:21:15:32 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:32 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [12/Dec/2025:21:15:32 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:32 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:33 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:33 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [12/Dec/2025:21:15:33 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:34 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:34 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:34 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:34 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:35 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:35 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:35 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:35 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [12/Dec/2025:21:15:36 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:36 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:36 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:36 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:37 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:37 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:37 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [12/Dec/2025:21:15:37 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [12/Dec/2025:21:15:38 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:38 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:38 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:39 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [12/Dec/2025:21:15:39 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:39 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:39 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:40 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:40 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:40 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:40 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:41 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [12/Dec/2025:21:15:41 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:41 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:41 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:42 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:42 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:42 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:42 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:43 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:43 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:43 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:44 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:44 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:44 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:44 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:45 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.139 - - [12/Dec/2025:21:15:45 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.139 - - [12/Dec/2025:21:15:45 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.139 - - [12/Dec/2025:21:15:45 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.221.110 - - [12/Dec/2025:22:39:14 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.42.179 - - [13/Dec/2025:02:36:34 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.174.248 - - [13/Dec/2025:02:36:34 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.151.119 - - [13/Dec/2025:03:42:28 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.144.20 - - [13/Dec/2025:05:18:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.134 Safari/537.36" 172.71.203.120 - - [13/Dec/2025:05:49:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.22.1.199 - - [13/Dec/2025:08:26:01 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.42.178 - - [13/Dec/2025:08:56:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 172.70.35.153 - - [13/Dec/2025:08:56:22 +0100] "GET /images/pronat/TueJun3014092520209822.xlsx HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 162.158.182.192 - - [13/Dec/2025:10:25:00 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 108.162.216.173 - - [13/Dec/2025:10:53:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 104.22.17.247 - - [13/Dec/2025:13:29:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 162.158.167.129 - - [13/Dec/2025:13:29:16 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.68.245.37 - - [13/Dec/2025:14:27:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.0.0 Safari/537.36" 162.158.216.20 - - [13/Dec/2025:14:40:23 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.151.186 - - [13/Dec/2025:18:20:09 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 108.162.245.19 - - [13/Dec/2025:18:22:55 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.195.107 - - [13/Dec/2025:21:22:45 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.213.151 - - [13/Dec/2025:21:22:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.43.4 - - [13/Dec/2025:21:22:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.43.4 - - [13/Dec/2025:21:22:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.8.79 - - [13/Dec/2025:21:51:35 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:36 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:36 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:36 +0100] "GET /includes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:36 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:37 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:37 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:37 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:37 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:38 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:38 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:38 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:38 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:39 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.79 - - [13/Dec/2025:21:51:39 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:39 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:40 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:40 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:40 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:40 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:41 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:41 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:41 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:41 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:42 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.79 - - [13/Dec/2025:21:51:42 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:42 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:42 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:43 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:43 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.79 - - [13/Dec/2025:21:51:43 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:43 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:44 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:44 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:44 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:44 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:45 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:45 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:45 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:46 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:46 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:46 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:46 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:47 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:47 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:47 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:47 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.79 - - [13/Dec/2025:21:51:48 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:48 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:48 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:48 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:49 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:49 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.79 - - [13/Dec/2025:21:51:49 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:50 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:50 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:50 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:50 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:51 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.79 - - [13/Dec/2025:21:51:51 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:51 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:51 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:52 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:52 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:52 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:52 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [13/Dec/2025:21:51:53 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.79 - - [13/Dec/2025:21:51:53 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.221.110 - - [13/Dec/2025:22:38:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.64.200.98 - - [13/Dec/2025:22:51:46 +0100] "GET / HTTP/1.1" 301 162 "-" "python-httpx/0.28.1" 172.69.60.153 - - [13/Dec/2025:23:16:15 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.223 - - [13/Dec/2025:23:16:16 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.223 - - [13/Dec/2025:23:16:16 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.223 - - [13/Dec/2025:23:16:17 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.223 - - [13/Dec/2025:23:16:17 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.223 - - [13/Dec/2025:23:16:17 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.223 - - [13/Dec/2025:23:16:18 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.223 - - [13/Dec/2025:23:16:18 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.223 - - [13/Dec/2025:23:16:18 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.223 - - [13/Dec/2025:23:16:19 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:19 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:19 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:20 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:20 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:20 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:21 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:21 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:21 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:22 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:22 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [13/Dec/2025:23:16:22 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:23 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:23 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:23 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:24 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:24 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:24 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:25 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:25 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:25 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:26 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:26 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:26 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:27 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:27 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [13/Dec/2025:23:16:27 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:28 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:28 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:28 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:29 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:29 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [13/Dec/2025:23:16:29 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:30 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:30 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:30 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:31 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:31 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:31 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:32 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:32 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:32 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:33 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:33 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:33 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:34 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:34 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:34 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:35 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:35 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:35 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:36 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:36 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:36 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [13/Dec/2025:23:16:37 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:37 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:37 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:38 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:38 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:38 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:39 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [13/Dec/2025:23:16:39 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [13/Dec/2025:23:16:39 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.87.49 - - [13/Dec/2025:23:29:01 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.222.106 - - [14/Dec/2025:00:07:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.245.187 - - [14/Dec/2025:00:07:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.191.73 - - [14/Dec/2025:00:07:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.60.152 - - [14/Dec/2025:00:40:27 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.60.222 - - [14/Dec/2025:00:40:28 +0100] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 162 "-" "-" 172.69.60.222 - - [14/Dec/2025:00:40:29 +0100] "GET /widgets.php HTTP/1.1" 301 162 "-" "-" 172.69.60.222 - - [14/Dec/2025:00:40:29 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:29 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:30 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:30 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:30 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:31 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:31 +0100] "GET /blurbs.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:31 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:32 +0100] "GET /axx.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:32 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:32 +0100] "GET /minik.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:33 +0100] "GET /OK.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:33 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:33 +0100] "GET /zsec.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:34 +0100] "GET /arig.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:34 +0100] "GET /admin1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:34 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:35 +0100] "GET /af32.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:35 +0100] "GET /rz.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:35 +0100] "GET /let.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:36 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:36 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:36 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:37 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:37 +0100] "GET /abe.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:37 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:37 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:38 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:38 +0100] "GET /cloud.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:38 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:39 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:39 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:39 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:40 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:40 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:40 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:41 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:41 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:41 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:42 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:42 +0100] "GET /uana.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:42 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:43 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:43 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:43 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:44 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:44 +0100] "GET /ioxi-rex4.php7 HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:44 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:45 +0100] "GET /wp-info.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:45 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:46 +0100] "GET /ws.php7 HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:46 +0100] "GET /rss.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:46 +0100] "GET /pekok.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:47 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:47 +0100] "GET /wp-aa.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:47 +0100] "GET /cart.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:48 +0100] "GET /compare.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:48 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:48 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:49 +0100] "GET /222.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:49 +0100] "GET /atom.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:49 +0100] "GET /case.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:50 +0100] "GET /docs.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:50 +0100] "GET /ios.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:50 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:51 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:51 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:51 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:52 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:52 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:52 +0100] "GET /f.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:53 +0100] "GET /max.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:53 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:53 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:54 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:54 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:54 +0100] "GET /vv.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:55 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:55 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:55 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:56 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:56 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:56 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:57 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:57 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:57 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:58 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:58 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:58 +0100] "GET /conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:59 +0100] "GET /xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:59 +0100] "GET /asas.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:40:59 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:00 +0100] "GET /about.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:00 +0100] "GET /akcc.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:00 +0100] "GET /zxl.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:01 +0100] "GET /r.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:01 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:01 +0100] "GET /js.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:02 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:02 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:03 +0100] "GET /123.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:03 +0100] "GET /321.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:03 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:04 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:04 +0100] "GET /al.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:04 +0100] "GET /xx.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:05 +0100] "GET /jga.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:05 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:05 +0100] "GET /ty.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:06 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:06 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:06 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:07 +0100] "GET /xo.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:07 +0100] "GET /dlu.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:07 +0100] "GET /rk2.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:08 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:08 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:08 +0100] "GET /karak.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:09 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:09 +0100] "GET /406.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:09 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:10 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:10 +0100] "GET /cache.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:10 +0100] "GET /zfile.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:11 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:11 +0100] "GET /des.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:11 +0100] "GET /ant.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:12 +0100] "GET /jlex.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:12 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:12 +0100] "GET /fm.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:13 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:13 +0100] "GET /wpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:13 +0100] "GET /lc.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:14 +0100] "GET /mlex.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:14 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:14 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:15 +0100] "GET /mpvloi.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:15 +0100] "GET /v1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:15 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:16 +0100] "GET /dex.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [14/Dec/2025:00:41:16 +0100] "GET /angelV2.php HTTP/1.1" 301 162 "-" "-" 172.71.191.74 - - [14/Dec/2025:00:45:16 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.183.69 - - [14/Dec/2025:01:09:38 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 104.23.223.110 - - [14/Dec/2025:01:09:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 172.71.194.123 - - [14/Dec/2025:01:22:46 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.221.110 - - [14/Dec/2025:01:44:32 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:14 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.166.77 - - [14/Dec/2025:02:52:15 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.166.77 - - [14/Dec/2025:02:52:17 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.69.166.77 - - [14/Dec/2025:02:52:17 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.69.166.77 - - [14/Dec/2025:02:52:18 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:19 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:19 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:20 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:52:21 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:21 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:22 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:23 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:23 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:24 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:52:24 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:25 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:52:26 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:52:27 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:28 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:30 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:52:30 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:31 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:52:31 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:52:32 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:32 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:52:33 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:52:33 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:33 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:52:34 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:35 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:36 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:52:36 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:52:37 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:52:37 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:52:38 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:38 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:39 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:52:39 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:52:39 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:40 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:40 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:41 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:41 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:43 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:43 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:50 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:51 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:51 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:52:52 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:52 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:53 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:55 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:56 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:52:56 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:57 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:59 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:52:59 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:00 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:00 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:53:01 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:01 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:53:02 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:02 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:53:03 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:03 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:03 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:04 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:53:05 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:05 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:05 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:06 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:06 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:07 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:07 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:53:08 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:09 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:09 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:10 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:11 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:12 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:02:53:14 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:15 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:15 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:53:16 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:16 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:16 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:17 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:18 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:18 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:19 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:53:19 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:19 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:20 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:21 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:21 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:22 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:23 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:24 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:24 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:02:53:25 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:25 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:26 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:27 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:53:27 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:28 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:02:53:28 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:29 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:53:30 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:30 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:53:32 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:32 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:34 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:35 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:36 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:02:53:36 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:36 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:53:37 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:37 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:38 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:38 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:39 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:39 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:39 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:40 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:41 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:53:41 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:41 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:42 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:42 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:43 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:44 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:53:45 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:46 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:46 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:47 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:48 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:48 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:53:49 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:49 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:53:50 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:50 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:52 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:53:52 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:53 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:54 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:54 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:53:57 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:58 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:53:59 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:00 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:54:00 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:00 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:01 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:02:54:02 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:02 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:54:03 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:04 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:05 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:54:05 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:05 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:54:06 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:06 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:08 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:54:08 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:54:09 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:09 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:10 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:54:12 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:12 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:12 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:13 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:54:13 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:14 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:54:15 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:54:16 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:16 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:17 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:17 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:18 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:18 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:19 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:54:19 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:20 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:54:20 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:54:21 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:22 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:22 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:22 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:54:23 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:23 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:24 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:25 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:54:25 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:54:26 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:27 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:02:54:27 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:54:29 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:29 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:54:30 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:31 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:31 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:32 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:33 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:34 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:34 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:54:35 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:54:35 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:36 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:54:36 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:54:38 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:38 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:54:38 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:39 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:39 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:02:54:39 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:54:41 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:41 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:42 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:54:43 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:43 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:44 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:02:54:45 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:54:46 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:47 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:47 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:54:48 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:48 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:54:49 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:02:54:49 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:49 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:50 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:51 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:51 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:53 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:54 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:54 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:54:55 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:54:55 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:54:55 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:57 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:57 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:58 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:54:58 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:54:59 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:54:59 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:55:00 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:00 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:55:01 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:02 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:03 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:03 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:55:04 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:55:05 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:06 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:06 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:07 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:08 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:55:08 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:09 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:09 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:55:10 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:11 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:11 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:55:11 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:55:12 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:12 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:55:13 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:55:13 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:14 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:14 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:15 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:16 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:55:16 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:02:55:16 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:17 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:17 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:18 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:55:18 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:55:19 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:55:19 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:55:20 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:21 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:55:21 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:55:22 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:55:22 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:22 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:24 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:24 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:25 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:25 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:26 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:26 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:55:27 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:55:28 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:29 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:55:29 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:02:55:29 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:30 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:55:30 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:31 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:55:32 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:33 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:33 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:33 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:55:34 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:36 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:02:55:39 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:02:55:40 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:40 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:41 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:55:41 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:41 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:55:42 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:42 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:43 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:43 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:55:44 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:55:45 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:55:45 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:55:47 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:55:47 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:55:48 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:49 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:49 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:49 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:55:50 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:55:50 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:55:51 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:55:51 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:52 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:52 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:02:55:53 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:53 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:55:54 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:54 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:56 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:55:56 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:56 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:55:57 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:57 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:55:58 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:55:58 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:58 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:59 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:55:59 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:00 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:01 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:02 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:02:56:02 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:56:03 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:04 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:04 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:04 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:56:06 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:06 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:56:07 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:56:07 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:08 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:09 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:10 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:56:10 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:02:56:11 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:56:11 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:56:12 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:56:12 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:56:12 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:13 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:56:13 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:14 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:56:15 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:16 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:56:16 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:56:17 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:18 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:18 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:19 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:19 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:20 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:20 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:21 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:22 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:22 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:02:56:23 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:23 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:56:25 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:56:25 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:56:26 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:56:27 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:27 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:28 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:56:29 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:56:30 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:56:31 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:56:31 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:31 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:32 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:32 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:33 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:33 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:34 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:56:34 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:35 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:35 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:56:36 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:56:36 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:36 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:56:37 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:39 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:39 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:40 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:41 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:42 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:42 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:56:43 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:43 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:44 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:45 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:46 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:46 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:56:47 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:56:47 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:48 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:48 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:49 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:56:50 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:50 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:56:51 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:56:52 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:56:52 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:56:53 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:53 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:54 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:56:54 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:55 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:56:56 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:56:56 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:02:56:57 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:56:58 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:00 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:01 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:02 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:03 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:03 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:04 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:04 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:57:05 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:05 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:06 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:06 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:57:06 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:07 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:07 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:08 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:09 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:10 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:11 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:11 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:12 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:13 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:13 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:14 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:02:57:14 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:57:15 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:15 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:57:16 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:17 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:17 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:19 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:19 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:20 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:21 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:21 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:23 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:24 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:24 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:25 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:25 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:29 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:29 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:31 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:31 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:31 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:33 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:34 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:34 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:35 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:36 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:36 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:38 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:38 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:39 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:40 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:57:40 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:41 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:42 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:57:43 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:44 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:45 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:45 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:45 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:46 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:46 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:57:47 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:47 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:48 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:49 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:49 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:50 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:53 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:57:53 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:54 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:55 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:57:56 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:57:57 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:57:58 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:57:58 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:00 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:00 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:58:01 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:58:01 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:02 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:58:03 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:02:58:03 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:02:58:05 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:06 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:06 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:07 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:58:08 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:58:09 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:10 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:10 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:10 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:12 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:58:12 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:58:13 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:13 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:13 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:14 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:15 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:16 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:16 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:17 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:58:18 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:58:18 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:19 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:58:20 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:20 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:58:21 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:58:22 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:23 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:58:23 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:58:24 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:25 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:25 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:58:26 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:27 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:27 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:28 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:29 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:58:30 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:30 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:58:31 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:58:31 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:58:32 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:02:58:33 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:02:58:33 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:33 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:35 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:35 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:58:35 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:58:36 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:36 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:37 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:58:37 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:38 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:39 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:39 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:40 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:40 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:58:41 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:58:42 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:58:42 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:43 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:02:58:44 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:44 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:45 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:45 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:45 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:46 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:46 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:47 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:48 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:58:49 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:49 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:58:49 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:50 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:58:50 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:51 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:58:52 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:52 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:53 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:58:54 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:58:54 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:55 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:58:56 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:57 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:58 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:58:58 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:58:58 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:59 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:58:59 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:00 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:59:01 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:02 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:59:02 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:59:04 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:04 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:59:05 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:05 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:06 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:59:07 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:07 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:59:08 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:59:09 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:02:59:10 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:11 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:12 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:12 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:13 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:14 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:59:15 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:16 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:59:24 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:25 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:59:26 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:26 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:27 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:27 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:28 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:59:28 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:29 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:29 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:30 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:02:59:30 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:02:59:31 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:59:31 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:59:32 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:02:59:33 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:59:33 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:34 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:35 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:59:36 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:36 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:59:37 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:37 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:02:59:38 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:39 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:39 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:59:40 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:02:59:41 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:59:42 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:43 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:02:59:44 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:44 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:45 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:02:59:47 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:02:59:48 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:59:48 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:02:59:49 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:59:50 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:50 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:51 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:02:59:51 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:59:52 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:52 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:53 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:59:54 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:54 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:55 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:55 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:02:59:56 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:02:59:58 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:02:59:58 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:00:00 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:01 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:00:01 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:05 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:05 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:06 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:03:00:06 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:03:00:07 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:07 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:03:00:07 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:08 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:08 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:00:09 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:10 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:10 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:11 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:03:00:12 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:12 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:13 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:14 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:14 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:15 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:03:00:15 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:03:00:16 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:16 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:17 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:17 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:19 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:19 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:19 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:00:20 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:21 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:22 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:03:00:22 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:23 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:23 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:24 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:24 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:03:00:24 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:25 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:26 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:27 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:27 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:03:00:31 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:03:00:32 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:32 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:00:32 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:33 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:34 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:03:00:35 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:35 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:35 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:36 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:37 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:03:00:38 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:03:00:38 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:39 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:39 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:40 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:40 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:00:41 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:42 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:42 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:43 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:43 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:03:00:44 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:44 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:03:00:45 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:46 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:46 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:03:00:47 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:47 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:00:48 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:48 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:00:49 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:03:00:49 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:50 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:50 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:03:00:51 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:52 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:00:52 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:00:53 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:53 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:00:54 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:55 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:00:55 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:56 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:00:57 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:03:00:57 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:58 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:00:59 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:00:59 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:03:01:00 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:00 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:01:02 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:01:03 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:03 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:04 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:04 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:05 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:05 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:06 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:01:06 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:01:08 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:08 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:08 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:09 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:10 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:10 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:12 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:13 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:01:13 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.164 - - [14/Dec/2025:03:01:14 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:14 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:15 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:16 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:01:16 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:18 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:01:18 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:19 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:19 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:03:01:19 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:20 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:01:20 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:21 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:21 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:22 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:23 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:24 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:01:24 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:25 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:26 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:27 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:27 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:28 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:01:29 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:01:29 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:03:01:29 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:30 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:30 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:31 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:31 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:32 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:32 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:33 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:33 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:34 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:34 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:35 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:01:36 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:03:01:37 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:01:37 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:01:39 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:03:01:40 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:03:01:41 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:42 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:03:01:43 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:03:01:43 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:01:44 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:45 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:03:01:45 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:03:01:46 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:47 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:01:48 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:03:01:49 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:49 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:50 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:50 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:51 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.164 - - [14/Dec/2025:03:01:51 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:52 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:03:01:52 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:53 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:53 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:54 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:54 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:01:54 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:56 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:01:56 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:57 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:03:01:58 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:01:59 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:01:59 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:02:01 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:02:02 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:02:03 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:03 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:02:04 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:04 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:03:02:05 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:02:07 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:02:07 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:07 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:03:02:09 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:03:02:10 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:10 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:11 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:12 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:12 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:02:13 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:02:13 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:14 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:03:02:14 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:15 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:16 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:16 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:03:02:17 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:18 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:03:02:19 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:03:02:20 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:20 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:21 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:02:21 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:02:22 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:02:23 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:23 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:02:24 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:03:02:24 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:25 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.142.164 - - [14/Dec/2025:03:02:25 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:25 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:26 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:03:02:27 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:03:02:28 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.164 - - [14/Dec/2025:03:02:29 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:02:30 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:03:02:31 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:02:32 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:02:34 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:35 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:35 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:03:02:36 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:03:02:36 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.142.164 - - [14/Dec/2025:03:02:36 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:37 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:38 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:03:02:38 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:02:39 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:39 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:40 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:02:40 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:02:41 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:42 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:02:42 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.142.164 - - [14/Dec/2025:03:02:43 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:43 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:02:44 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:02:44 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:45 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.164 - - [14/Dec/2025:03:02:46 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:47 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:02:48 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:49 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:50 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:51 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:02:51 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:02:52 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.142.164 - - [14/Dec/2025:03:02:52 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:53 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:55 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:56 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:03:02:56 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.164 - - [14/Dec/2025:03:02:57 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:57 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:02:58 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:02:58 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:58 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.164 - - [14/Dec/2025:03:02:59 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:02:59 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.164 - - [14/Dec/2025:03:03:00 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.142.164 - - [14/Dec/2025:03:03:02 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.164 - - [14/Dec/2025:03:03:03 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.142.164 - - [14/Dec/2025:03:03:04 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.164 - - [14/Dec/2025:03:03:05 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.165 - - [14/Dec/2025:03:03:06 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:06 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:07 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:08 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:08 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.165 - - [14/Dec/2025:03:03:09 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:10 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:10 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:11 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.165 - - [14/Dec/2025:03:03:12 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.142.165 - - [14/Dec/2025:03:03:13 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:13 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.165 - - [14/Dec/2025:03:03:14 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:15 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.165 - - [14/Dec/2025:03:03:16 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.165 - - [14/Dec/2025:03:03:16 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:17 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:17 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.165 - - [14/Dec/2025:03:03:17 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:18 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.165 - - [14/Dec/2025:03:03:18 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.142.165 - - [14/Dec/2025:03:03:19 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.142.165 - - [14/Dec/2025:03:03:20 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:20 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:20 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:22 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.165 - - [14/Dec/2025:03:03:22 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.165 - - [14/Dec/2025:03:03:22 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:23 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.165 - - [14/Dec/2025:03:03:23 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.142.165 - - [14/Dec/2025:03:03:25 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:25 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:25 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.142.165 - - [14/Dec/2025:03:03:27 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.142.165 - - [14/Dec/2025:03:03:28 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:29 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.142.165 - - [14/Dec/2025:03:03:30 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:31 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.142.165 - - [14/Dec/2025:03:03:32 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:32 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:32 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.142.165 - - [14/Dec/2025:03:03:33 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.142.165 - - [14/Dec/2025:03:03:33 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.68.242.108 - - [14/Dec/2025:03:03:36 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.81.205 - - [14/Dec/2025:03:03:36 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.81.205 - - [14/Dec/2025:03:03:37 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.81.205 - - [14/Dec/2025:03:03:37 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.81.205 - - [14/Dec/2025:03:03:38 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.81.205 - - [14/Dec/2025:03:03:38 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.81.205 - - [14/Dec/2025:03:03:39 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.81.205 - - [14/Dec/2025:03:03:41 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.81.205 - - [14/Dec/2025:03:03:41 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [14/Dec/2025:03:03:42 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:03:42 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:43 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:43 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:44 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [14/Dec/2025:03:03:45 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:03:45 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:03:46 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [14/Dec/2025:03:03:47 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:03:48 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [14/Dec/2025:03:03:49 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:49 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:50 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:50 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [14/Dec/2025:03:03:51 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:52 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:52 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [14/Dec/2025:03:03:53 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:53 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:03:53 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [14/Dec/2025:03:03:55 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:03:55 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:56 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:57 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:58 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [14/Dec/2025:03:03:59 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:03:59 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:00 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:03 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:03 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:04 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:04 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:05 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:06 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:07 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:08 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [14/Dec/2025:03:04:09 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:11 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [14/Dec/2025:03:04:11 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [14/Dec/2025:03:04:12 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:04:13 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [14/Dec/2025:03:04:14 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:16 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:16 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [14/Dec/2025:03:04:16 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:04:17 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [14/Dec/2025:03:04:17 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:18 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:19 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:20 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:20 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:04:23 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:24 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:04:25 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [14/Dec/2025:03:04:25 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:26 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:04:27 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [14/Dec/2025:03:04:28 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:28 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:29 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:30 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:31 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:31 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:31 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:32 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [14/Dec/2025:03:04:34 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:35 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:37 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:38 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:04:38 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [14/Dec/2025:03:04:39 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [14/Dec/2025:03:04:39 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:04:40 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:40 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:04:40 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:41 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:41 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:42 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:42 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:04:43 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [14/Dec/2025:03:04:45 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:47 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:04:48 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:49 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:04:49 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:49 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:50 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:50 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:51 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:51 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:52 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:53 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [14/Dec/2025:03:04:54 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:04:55 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:04:55 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:56 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:04:57 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [14/Dec/2025:03:04:57 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [14/Dec/2025:03:04:58 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:04:59 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:00 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:00 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:01 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:02 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:04 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:05 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:05 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:05:06 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:08 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.68.242.108 - - [14/Dec/2025:03:05:08 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:08 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:09 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:10 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:10 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:12 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:05:13 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:14 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:14 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [14/Dec/2025:03:05:17 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [14/Dec/2025:03:05:18 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:18 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:05:19 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:05:20 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:21 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.68.242.108 - - [14/Dec/2025:03:05:22 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:23 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [14/Dec/2025:03:05:24 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.68.242.108 - - [14/Dec/2025:03:05:25 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:05:25 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:26 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:27 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:27 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:05:28 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:28 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:30 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:30 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:05:31 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:32 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:32 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:05:33 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:34 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:34 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:36 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [14/Dec/2025:03:05:36 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.68.242.108 - - [14/Dec/2025:03:05:37 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:38 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:05:38 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [14/Dec/2025:03:05:39 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [14/Dec/2025:03:05:39 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [14/Dec/2025:03:05:40 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.68.242.108 - - [14/Dec/2025:03:05:40 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.242.108 - - [14/Dec/2025:03:05:40 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.68.242.108 - - [14/Dec/2025:03:05:41 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:05:42 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:43 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [14/Dec/2025:03:05:43 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:05:44 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:44 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:46 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:47 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.68.242.108 - - [14/Dec/2025:03:05:47 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.68.242.108 - - [14/Dec/2025:03:05:48 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:49 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.68.242.108 - - [14/Dec/2025:03:05:49 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.68.242.108 - - [14/Dec/2025:03:05:49 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:50 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:50 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:52 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.68.242.108 - - [14/Dec/2025:03:05:52 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.68.242.108 - - [14/Dec/2025:03:05:54 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.242.108 - - [14/Dec/2025:03:05:54 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.134.113 - - [14/Dec/2025:03:34:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.229.113 - - [14/Dec/2025:03:34:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.169.227 - - [14/Dec/2025:05:01:57 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [14/Dec/2025:05:01:57 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:01:58 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:01:58 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [14/Dec/2025:05:01:58 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:01:59 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:01:59 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:01:59 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:00 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:00 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:00 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:00 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:01 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [14/Dec/2025:05:02:01 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:01 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:02 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:02 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:02 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:02 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:03 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:03 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:03 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:03 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:04 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:04 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:04 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:05 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:05 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:05 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:05 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:06 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:06 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:06 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:07 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:07 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:07 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:07 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:08 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:08 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:08 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:09 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:09 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:09 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:09 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [14/Dec/2025:05:02:10 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:10 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:10 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:10 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:11 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:11 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:11 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:12 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:12 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:12 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [14/Dec/2025:05:02:12 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:13 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:13 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [14/Dec/2025:05:02:13 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:14 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:14 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:14 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [14/Dec/2025:05:02:14 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.160.134 - - [14/Dec/2025:06:12:36 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 104.23.160.64 - - [14/Dec/2025:06:12:36 +0100] "HEAD / HTTP/1.1" 301 0 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 162.158.49.201 - - [14/Dec/2025:07:42:37 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:37 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:38 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:38 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:38 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:39 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:39 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:39 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:40 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:40 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:40 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:41 +0100] "GET /dejavu.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:41 +0100] "GET /pepe.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:41 +0100] "GET /public/z.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:42 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:42 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:42 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:43 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:43 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:43 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:44 +0100] "GET /ot.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:44 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:44 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:45 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:45 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:45 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:46 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:46 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:46 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:47 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:47 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:47 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:48 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:48 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:48 +0100] "GET /v3.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:49 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:49 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:49 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:50 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:50 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:50 +0100] "GET /habhan.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:51 +0100] "GET /mans.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:51 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:51 +0100] "GET /yas.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:52 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:52 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:52 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:52 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:53 +0100] "GET /blox.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:53 +0100] "GET /scx.php7 HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:53 +0100] "GET /siln.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:54 +0100] "GET /mtvcrew.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:54 +0100] "GET /111.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:54 +0100] "GET /raw.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:55 +0100] "GET /great.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:55 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:55 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:56 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:56 +0100] "GET /shoha.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:56 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:57 +0100] "GET /sallu.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:57 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:57 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:58 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:58 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:58 +0100] "GET /acp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:59 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:59 +0100] "GET /wp-is.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:42:59 +0100] "GET /zxin.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:43:00 +0100] "GET /pass.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:43:00 +0100] "GET /public/moon.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:43:00 +0100] "GET /ok.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:43:01 +0100] "GET /v3.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:43:01 +0100] "GET /js.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:43:01 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:43:02 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [14/Dec/2025:07:43:02 +0100] "GET /hello.php HTTP/1.1" 301 162 "-" "-" 172.70.47.30 - - [14/Dec/2025:07:45:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:41 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:41 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:06:41 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:41 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:41 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:06:42 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:42 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:42 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:42 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:42 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:43 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:43 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:06:43 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:43 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:06:44 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:44 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:06:44 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:06:44 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:06:44 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:45 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:06:45 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:06:45 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:45 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:45 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:46 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:46 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:46 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:46 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:47 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:06:47 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:06:47 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:47 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:06:47 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:48 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:06:48 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:48 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:48 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:06:48 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:06:49 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:49 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:49 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:49 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:06:50 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:50 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:50 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:06:50 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:50 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:06:51 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:51 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:51 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:06:51 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:06:51 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:52 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:52 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:52 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:52 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:53 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:53 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:53 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:06:53 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:06:53 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:06:54 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:54 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:54 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:54 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:06:55 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:06:55 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:55 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:06:55 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:55 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:06:56 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:56 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:56 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:06:56 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:06:57 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:57 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:06:57 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:57 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:06:57 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:58 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:58 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:06:58 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:58 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:06:59 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:59 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:59 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:06:59 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:06:59 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:00 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:00 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:00 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:07:00 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:01 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:01 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:01 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:01 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:01 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:02 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:02 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:02 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:02 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:07:03 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:03 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:03 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:03 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:07:03 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:04 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:04 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:04 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:04 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:04 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:05 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:05 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:05 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:05 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:05 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:06 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:06 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:06 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:06 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:07 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:07 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:07 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:07 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:07 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:08 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:08 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:08 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:08 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:07:09 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:07:09 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:09 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:09 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:10 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:10 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:10 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:10 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:10 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:07:11 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:11 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:11 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:11 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:11 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:07:12 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:12 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:07:12 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:12 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:12 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:13 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:13 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:13 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:13 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:14 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:14 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:14 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:07:14 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:15 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:15 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:07:15 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:15 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:15 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:07:16 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:07:16 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:16 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:16 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:17 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:17 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:17 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:17 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:17 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:18 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:18 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:18 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:18 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:19 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:19 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:19 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:19 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:07:19 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:20 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:20 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:20 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:20 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:21 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:21 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:21 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:07:21 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:21 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:22 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:22 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:22 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:22 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:23 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:23 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:07:23 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:07:23 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:23 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:24 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:24 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:07:24 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:24 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:07:24 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:25 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:07:25 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:25 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:25 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:26 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.23.175.111 - - [14/Dec/2025:08:07:26 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:07:26 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:26 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:26 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:07:27 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:27 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:27 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:27 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:27 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:28 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:28 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:28 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:07:28 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:28 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:29 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:29 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:29 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:29 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:30 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:30 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:30 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:30 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:30 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:31 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:31 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:31 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:31 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:32 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:32 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:32 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:07:32 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:07:32 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:33 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:07:33 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:33 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:33 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:07:33 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:34 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:34 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:34 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:34 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:35 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:35 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:35 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:35 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:35 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:36 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:07:36 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:36 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:36 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:37 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:37 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:37 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:37 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:37 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:38 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:38 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:38 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:38 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:07:38 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:39 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:39 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:39 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:39 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:39 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:07:40 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:40 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:40 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:07:40 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:41 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:41 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:41 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:41 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:41 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:42 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:42 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:42 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:42 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:43 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:07:43 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:43 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:07:43 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:43 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:07:44 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:44 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:44 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:44 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:07:45 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:07:45 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:45 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:45 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:45 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:46 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:46 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:46 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:46 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:07:47 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:07:47 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:47 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:47 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:47 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:48 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:48 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:48 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:48 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:49 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:49 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:49 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:49 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:49 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:50 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:07:50 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:07:50 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:50 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:50 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:51 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:07:51 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:51 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:51 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:07:51 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:52 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:52 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:07:52 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:07:52 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:07:53 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:53 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:53 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:53 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:53 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:07:54 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:54 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:54 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:54 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:55 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:07:55 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:55 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:07:55 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:55 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:56 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:56 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:56 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:56 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:56 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:57 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:57 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:57 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:07:57 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:07:57 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:07:58 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:58 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:58 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:07:58 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:07:59 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:07:59 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:07:59 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:07:59 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:00 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:00 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:08:00 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:00 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:01 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:08:01 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:08:01 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:01 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:02 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:02 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:02 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:02 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:03 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:03 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:03 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:08:03 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:04 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:04 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:04 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:04 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:08:04 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:08:05 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:05 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:05 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:05 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:06 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:06 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:06 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:06 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:07 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:07 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:07 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:07 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:07 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:08:08 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:08 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:08:08 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:08 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:09 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:09 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:09 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:09 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:09 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:10 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:10 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:10 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:08:10 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:11 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:08:11 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:11 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:11 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:11 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:08:12 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:12 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:12 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:12 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:13 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:13 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:08:13 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:13 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:08:13 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:14 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:14 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:08:14 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:14 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:15 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:15 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:15 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:15 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:15 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:16 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:16 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:16 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.23.175.111 - - [14/Dec/2025:08:08:16 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:17 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:17 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:17 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:08:17 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:17 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:18 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:18 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:18 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:18 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:19 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:19 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:19 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:19 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:19 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:08:20 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:20 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:20 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:20 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:08:20 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:08:21 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:21 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:08:21 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:08:21 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:22 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:08:22 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:22 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:22 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:22 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:23 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:23 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:23 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:23 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:24 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:24 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:24 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:24 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:25 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:25 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:08:25 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:25 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:25 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:26 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:08:26 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:26 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:26 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:27 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:27 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:27 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:27 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:28 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:28 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:28 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:28 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:29 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:29 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:29 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:29 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:30 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:08:30 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:30 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:30 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:31 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:31 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:31 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:31 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:31 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:32 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:32 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:32 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:08:32 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:08:33 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:08:33 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:33 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:08:33 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:33 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:08:34 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:34 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:34 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:08:34 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:35 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:35 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:35 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:35 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:35 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.23.175.111 - - [14/Dec/2025:08:08:36 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:08:36 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:36 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:36 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:08:37 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:37 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:37 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:08:37 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:38 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:38 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:38 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:38 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:08:39 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:08:39 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:39 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:39 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:39 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:40 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:40 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:40 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:08:40 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:41 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:41 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:41 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:41 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:42 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:42 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:42 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:42 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:42 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:43 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:43 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:43 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:43 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:44 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:44 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:44 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:44 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:44 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:45 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:08:45 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:08:45 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:08:46 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:46 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:46 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:08:46 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:47 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:08:47 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:47 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:47 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:47 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:48 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:48 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:08:48 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:48 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:48 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:49 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:08:49 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:08:49 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:49 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:50 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:50 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:08:50 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:50 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:50 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:51 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:51 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:51 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:51 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:51 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:08:52 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:52 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:52 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:52 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:53 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:53 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:08:53 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:53 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:53 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:54 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:08:54 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:54 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:08:54 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:54 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:55 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:55 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:55 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:55 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:08:56 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:56 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:56 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:56 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:56 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:08:57 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:08:57 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:57 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:08:57 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:58 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:08:58 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:58 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:58 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:08:59 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:08:59 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:59 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:08:59 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:08:59 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:09:00 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:00 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:00 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:00 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:00 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:01 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:01 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:01 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:01 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:02 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:02 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:02 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:02 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:03 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:03 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:03 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:03 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:04 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:04 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:04 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:04 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:04 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:05 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:09:05 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:09:05 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:09:05 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:05 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:06 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:06 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:06 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:06 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:09:07 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:07 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:09:07 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:07 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:07 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:08 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:08 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:09 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:09 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:09 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:09 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:10 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:10 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:10 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:09:10 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:11 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:11 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:11 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:09:11 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:11 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:12 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:12 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:12 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:12 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:13 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:13 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:13 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:09:13 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:13 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:14 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.23.175.111 - - [14/Dec/2025:08:09:14 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:14 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:14 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:15 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:15 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:09:15 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:15 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:09:15 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:09:16 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:09:16 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:16 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:16 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:16 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:17 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:17 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:17 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:17 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:17 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:18 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:18 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:18 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:18 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:19 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:09:19 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:19 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:19 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:19 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:20 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:20 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:20 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:20 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:21 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:21 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:21 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:21 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:09:21 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:22 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:22 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:22 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.23.175.111 - - [14/Dec/2025:08:09:22 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:22 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:23 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:23 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.23.175.111 - - [14/Dec/2025:08:09:23 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:23 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:09:23 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:24 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:24 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:24 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:09:24 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:25 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:25 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:25 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:25 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:25 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:26 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:26 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:26 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:26 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:26 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:27 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:27 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:27 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:27 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:28 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:28 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:09:28 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:28 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:28 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:29 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:29 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:29 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:29 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:29 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:30 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:30 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:30 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:30 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:31 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:31 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:31 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:09:31 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:31 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:32 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:32 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:32 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:32 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:32 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:33 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:33 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:33 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:33 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:09:34 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:09:34 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:34 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:34 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:34 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:35 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:35 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:35 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:35 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:35 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:36 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:36 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:36 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:36 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:36 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:37 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:09:37 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:09:37 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:37 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:38 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:38 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:38 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:09:38 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:38 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:39 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:39 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:39 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:09:39 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:39 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:40 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:40 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:40 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:40 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:41 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:09:41 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:41 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:41 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:41 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:42 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:42 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:42 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:42 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:43 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:43 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:09:43 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:43 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:43 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:44 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:44 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:44 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:44 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:44 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:45 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:45 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:45 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:45 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:45 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:46 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:46 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:46 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:46 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:46 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:47 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:47 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:47 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:47 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:48 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:48 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:09:48 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:48 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:09:48 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:49 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:49 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:09:49 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:09:49 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:50 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:50 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:50 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:09:50 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:50 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:09:51 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:51 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:51 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:51 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:09:52 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:09:52 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:52 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:52 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:52 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:09:53 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:09:53 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:53 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:53 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:09:53 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:54 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:09:54 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:54 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:54 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:54 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:55 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.23.175.111 - - [14/Dec/2025:08:09:55 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:55 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:09:55 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:56 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:56 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:56 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:56 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.23.175.111 - - [14/Dec/2025:08:09:56 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:57 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:57 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:57 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:57 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:09:57 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:09:58 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:58 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:58 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:58 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:59 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:09:59 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:09:59 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:09:59 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:09:59 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:10:00 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:10:00 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:00 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:00 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:10:01 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:01 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.23.175.111 - - [14/Dec/2025:08:10:01 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:01 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:10:01 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:10:02 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:10:02 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:02 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:03 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:03 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:03 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:03 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:10:04 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:04 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:10:04 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.23.175.111 - - [14/Dec/2025:08:10:04 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:10:04 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.23.175.111 - - [14/Dec/2025:08:10:05 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:10:05 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:05 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:05 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:06 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:10:06 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:06 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:06 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:06 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:07 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:07 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:10:07 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.111 - - [14/Dec/2025:08:10:07 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:07 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:08 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:10:08 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:08 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:08 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:10:09 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:09 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:10:09 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:09 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:10 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:10 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:10 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:10 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:10 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:10:11 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:11 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:10:11 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:11 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:12 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:12 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:12 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.23.175.111 - - [14/Dec/2025:08:10:12 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:12 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:10:13 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:10:13 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.23.175.111 - - [14/Dec/2025:08:10:13 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:13 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:10:14 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:14 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:14 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:14 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:14 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:15 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:10:15 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.23.175.111 - - [14/Dec/2025:08:10:15 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.23.175.111 - - [14/Dec/2025:08:10:15 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:16 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:16 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:16 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:16 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:16 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.23.175.111 - - [14/Dec/2025:08:10:17 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:10:17 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:17 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:17 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.23.175.111 - - [14/Dec/2025:08:10:17 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:10:18 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.175.111 - - [14/Dec/2025:08:10:18 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:18 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.23.175.111 - - [14/Dec/2025:08:10:18 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:19 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:19 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.23.175.111 - - [14/Dec/2025:08:10:19 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:19 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:19 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:20 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:10:20 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.23.175.111 - - [14/Dec/2025:08:10:20 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:20 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:21 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:21 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:21 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:21 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.23.175.111 - - [14/Dec/2025:08:10:21 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:22 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:22 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:22 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:22 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:23 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:23 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.162.41 - - [14/Dec/2025:08:10:23 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:23 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:23 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:24 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:24 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:24 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.162.41 - - [14/Dec/2025:08:10:24 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:24 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:25 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.162.41 - - [14/Dec/2025:08:10:25 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:25 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:25 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:25 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.162.41 - - [14/Dec/2025:08:10:26 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:26 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:26 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:26 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:26 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:27 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:27 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:27 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:27 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.162.41 - - [14/Dec/2025:08:10:28 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:28 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:28 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.162.41 - - [14/Dec/2025:08:10:28 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.162.41 - - [14/Dec/2025:08:10:28 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:29 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.162.41 - - [14/Dec/2025:08:10:29 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.162.41 - - [14/Dec/2025:08:10:29 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.162.41 - - [14/Dec/2025:08:10:29 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:29 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.162.41 - - [14/Dec/2025:08:10:30 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:30 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.162.41 - - [14/Dec/2025:08:10:30 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.162.41 - - [14/Dec/2025:08:10:30 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:31 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:31 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.162.41 - - [14/Dec/2025:08:10:31 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:31 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:31 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:32 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.162.41 - - [14/Dec/2025:08:10:32 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:32 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.162.41 - - [14/Dec/2025:08:10:32 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:32 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:33 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:33 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.162.41 - - [14/Dec/2025:08:10:33 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:33 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:33 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:34 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:34 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:34 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:34 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:34 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:35 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:35 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.162.41 - - [14/Dec/2025:08:10:35 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.162.41 - - [14/Dec/2025:08:10:35 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:35 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:36 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.162.41 - - [14/Dec/2025:08:10:36 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.162.41 - - [14/Dec/2025:08:10:36 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.162.41 - - [14/Dec/2025:08:10:36 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:36 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:37 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.162.41 - - [14/Dec/2025:08:10:37 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:37 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.162.41 - - [14/Dec/2025:08:10:37 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:37 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:38 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.162.41 - - [14/Dec/2025:08:10:38 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.162.41 - - [14/Dec/2025:08:10:38 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:38 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:38 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.162.41 - - [14/Dec/2025:08:10:39 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.162.41 - - [14/Dec/2025:08:10:39 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:39 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.162.41 - - [14/Dec/2025:08:10:39 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:39 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:40 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:40 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.162.41 - - [14/Dec/2025:08:10:40 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:40 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:40 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:41 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:41 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:41 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:41 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:42 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.162.41 - - [14/Dec/2025:08:10:42 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.162.41 - - [14/Dec/2025:08:10:42 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:42 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.162.41 - - [14/Dec/2025:08:10:42 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.162.41 - - [14/Dec/2025:08:10:43 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.162.41 - - [14/Dec/2025:08:10:43 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.162.41 - - [14/Dec/2025:08:10:43 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:43 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.162.41 - - [14/Dec/2025:08:10:43 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:44 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:44 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.162.41 - - [14/Dec/2025:08:10:44 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:44 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:44 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.162.41 - - [14/Dec/2025:08:10:45 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:45 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.162.41 - - [14/Dec/2025:08:10:45 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:45 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:45 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:46 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.162.41 - - [14/Dec/2025:08:10:46 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:46 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.162.41 - - [14/Dec/2025:08:10:46 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:46 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.162.41 - - [14/Dec/2025:08:10:47 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:47 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:47 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:47 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.162.41 - - [14/Dec/2025:08:10:47 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.162.41 - - [14/Dec/2025:08:10:48 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:48 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:48 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.162.41 - - [14/Dec/2025:08:10:48 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:48 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:49 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.162.41 - - [14/Dec/2025:08:10:49 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.162.41 - - [14/Dec/2025:08:10:49 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:49 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:49 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.162.41 - - [14/Dec/2025:08:10:50 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:50 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.162.41 - - [14/Dec/2025:08:10:50 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:50 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:50 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.162.41 - - [14/Dec/2025:08:10:51 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:51 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.162.41 - - [14/Dec/2025:08:10:51 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:51 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.162.41 - - [14/Dec/2025:08:10:51 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:52 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.162.41 - - [14/Dec/2025:08:10:52 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.162.41 - - [14/Dec/2025:08:10:52 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.162.41 - - [14/Dec/2025:08:10:52 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.162.41 - - [14/Dec/2025:08:10:52 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:53 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:53 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:53 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:53 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:54 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:54 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:54 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.162.41 - - [14/Dec/2025:08:10:54 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:54 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:55 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:55 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:55 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:55 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:56 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:56 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:56 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:56 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.162.41 - - [14/Dec/2025:08:10:56 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.162.41 - - [14/Dec/2025:08:10:57 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:57 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.162.41 - - [14/Dec/2025:08:10:57 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.162.41 - - [14/Dec/2025:08:10:57 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.162.41 - - [14/Dec/2025:08:10:57 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:58 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.162.41 - - [14/Dec/2025:08:10:58 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.162.41 - - [14/Dec/2025:08:10:58 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.162.41 - - [14/Dec/2025:08:10:58 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.162.41 - - [14/Dec/2025:08:10:58 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.162.41 - - [14/Dec/2025:08:10:59 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.23.223.110 - - [14/Dec/2025:11:22:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:11 +0100] "GET /Search.php?searchbar-type=Me+Qera HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:11 +0100] "GET /details.php?post_id=8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 104.23.223.110 - - [14/Dec/2025:11:22:12 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:12 +0100] "GET /RrethNesh.php?post_id=2345 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 104.23.223.110 - - [14/Dec/2025:11:22:12 +0100] "GET /Search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 104.23.223.110 - - [14/Dec/2025:11:22:13 +0100] "GET /details.php?post_id=2 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 172.68.183.7 - - [14/Dec/2025:11:22:13 +0100] "GET /js/modernizr.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:14 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:15 +0100] "GET /Search.php?searchbar-type=Toke HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:15 +0100] "GET /details.php?post_id=6 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:15 +0100] "GET /login.php?v=Register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:16 +0100] "GET /details.php?post_id=5 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:16 +0100] "GET /details.php?post_id=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:17 +0100] "GET /RrethNesh.php?post_id=3456 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 104.23.221.166 - - [14/Dec/2025:11:22:17 +0100] "GET /js/main.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:18 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 104.23.223.110 - - [14/Dec/2025:11:22:19 +0100] "GET /login.php?v=Login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:19 +0100] "GET /details.php?post_id=4 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:19 +0100] "GET /Search.php?luks=true HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:20 +0100] "GET /Search.php?okazion=true HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 104.23.223.110 - - [14/Dec/2025:11:22:20 +0100] "GET /details.php?post_id=3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 104.23.223.110 - - [14/Dec/2025:11:22:21 +0100] "GET /RrethNesh.php?post_id=4567 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 104.23.217.110 - - [14/Dec/2025:11:22:21 +0100] "GET /js/jquery.flexslider-min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:22 +0100] "GET /Search.php?tipi=Projekt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:22 +0100] "GET /Search.php?searchbar-type=Ne+Shitje HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:23 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:23 +0100] "GET /details.php?post_id=9 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:23 +0100] "GET /details.php?post_id=7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 104.23.223.110 - - [14/Dec/2025:11:22:24 +0100] "GET /RrethNesh.php?post_id=5678 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 104.23.223.110 - - [14/Dec/2025:11:22:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:32 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.195 - - [14/Dec/2025:12:32:34 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.195 - - [14/Dec/2025:12:32:34 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.195 - - [14/Dec/2025:12:32:35 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.195 - - [14/Dec/2025:12:32:36 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.195 - - [14/Dec/2025:12:32:36 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.195 - - [14/Dec/2025:12:32:37 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.195 - - [14/Dec/2025:12:32:37 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.149 - - [14/Dec/2025:12:32:38 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:38 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:39 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:39 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:40 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:41 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:41 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:42 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:42 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:43 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:43 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:44 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:44 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:45 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:46 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:46 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:47 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:47 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:48 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.149 - - [14/Dec/2025:12:32:48 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:49 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:50 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:50 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:51 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:51 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:52 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:52 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:53 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:53 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:54 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:55 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:55 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:56 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:56 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:57 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:57 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:58 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:32:59 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:32:59 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:00 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:00 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:01 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:01 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:02 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:02 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:03 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:04 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:04 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:05 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:05 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:06 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:06 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:07 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:07 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:08 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:09 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:09 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:10 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:10 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:11 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:11 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.149 - - [14/Dec/2025:12:33:12 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:13 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.149 - - [14/Dec/2025:12:33:13 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.22.1.199 - - [14/Dec/2025:13:25:22 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.209.47 - - [14/Dec/2025:13:25:23 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.184.46 - - [14/Dec/2025:16:37:59 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.221.110 - - [14/Dec/2025:16:38:04 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.172.21 - - [14/Dec/2025:17:23:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36" 104.22.17.247 - - [14/Dec/2025:17:38:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.232.80 - - [14/Dec/2025:19:12:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.229.135 - - [14/Dec/2025:19:12:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.68.10.41 - - [14/Dec/2025:19:30:19 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.223.110 - - [14/Dec/2025:19:30:46 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.245.187 - - [14/Dec/2025:19:53:13 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.245.187 - - [14/Dec/2025:19:53:13 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.68.245.187 - - [14/Dec/2025:19:53:14 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.245.187 - - [14/Dec/2025:19:53:14 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.68.245.187 - - [14/Dec/2025:19:53:14 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.68.245.187 - - [14/Dec/2025:19:53:14 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.68.245.187 - - [14/Dec/2025:19:53:14 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.70.58.11 - - [14/Dec/2025:20:01:21 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:21:08 +0100] "GET /phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:09 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:10 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:10 +0100] "GET /_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:10 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:11 +0100] "GET /php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:11 +0100] "GET /php_info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:12 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:12 +0100] "GET /pi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.127 - - [14/Dec/2025:22:21:13 +0100] "GET /admin/phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:21:14 +0100] "GET /pinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:21:14 +0100] "GET /php_version.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:21:14 +0100] "GET /.aws/credentials HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:21:15 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:21:15 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:21:16 +0100] "GET /.env.local HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:21:16 +0100] "GET /.env.backup HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:21:16 +0100] "GET /config/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.110 - - [14/Dec/2025:22:21:50 +0100] "GET /phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.158.242 - - [14/Dec/2025:22:22:00 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.41 - - [14/Dec/2025:22:22:10 +0100] "GET /_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.87 - - [14/Dec/2025:22:22:20 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.169 - - [14/Dec/2025:22:22:23 +0100] "GET /php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.169 - - [14/Dec/2025:22:22:23 +0100] "GET /php_info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.78 - - [14/Dec/2025:22:22:24 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.87 - - [14/Dec/2025:22:22:24 +0100] "GET /pi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.78 - - [14/Dec/2025:22:22:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.87 - - [14/Dec/2025:22:22:25 +0100] "GET /admin/phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.87 - - [14/Dec/2025:22:22:25 +0100] "GET /pinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.144 - - [14/Dec/2025:22:22:26 +0100] "GET /php_version.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.136 - - [14/Dec/2025:22:22:26 +0100] "GET /.aws/credentials HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.158.242 - - [14/Dec/2025:22:22:27 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.78 - - [14/Dec/2025:22:22:27 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.144 - - [14/Dec/2025:22:22:27 +0100] "GET /.env.local HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.136 - - [14/Dec/2025:22:22:28 +0100] "GET /.env.backup HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.71.159.136 - - [14/Dec/2025:22:22:28 +0100] "GET /config/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.10.40 - - [14/Dec/2025:22:38:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.126.61 - - [14/Dec/2025:23:15:34 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.70.126.61 - - [14/Dec/2025:23:15:35 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.70.126.61 - - [14/Dec/2025:23:15:35 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.70.126.61 - - [14/Dec/2025:23:15:35 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.70.126.61 - - [14/Dec/2025:23:15:35 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.70.126.61 - - [14/Dec/2025:23:15:35 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.70.126.61 - - [14/Dec/2025:23:15:35 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:45 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:46 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:47 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:47 +0100] "GET /includes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:47 +0100] "GET /browse.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:48 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:48 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:48 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:49 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:49 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:49 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:50 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:50 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:50 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:51 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:51 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:51 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:52 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:52 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:52 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:53 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:53 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:53 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [14/Dec/2025:23:23:54 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:54 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:54 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:55 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:55 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:55 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:56 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:56 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:56 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:57 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:57 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:57 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:58 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:58 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:58 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:23:59 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [14/Dec/2025:23:23:59 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:23:59 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:00 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:24:00 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:00 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:24:00 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:01 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:01 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:24:01 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:02 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:02 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:02 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:03 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:24:03 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:03 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [14/Dec/2025:23:24:04 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:24:04 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:04 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:05 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:05 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:05 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:06 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:24:06 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:06 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:07 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [14/Dec/2025:23:24:07 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:07 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [14/Dec/2025:23:24:08 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [14/Dec/2025:23:24:08 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.17.38 - - [15/Dec/2025:00:10:55 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [15/Dec/2025:00:50:44 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:46 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:46 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:47 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:47 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:48 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:48 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:49 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:49 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:50 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:51 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:51 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:52 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:52 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:53 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:53 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:54 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:54 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:55 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:56 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:56 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:57 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:57 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:58 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:58 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:50:59 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:50:59 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:00 +0100] "GET /wp-content/plugins/HelloDollyV2/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:01 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:01 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:02 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:02 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:03 +0100] "GET /wp-content/themes/themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [15/Dec/2025:00:51:03 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:04 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:04 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [15/Dec/2025:00:51:05 +0100] "GET /wp-content/uploads/Geforce.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:06 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:06 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [15/Dec/2025:00:51:07 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:07 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:08 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:08 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [15/Dec/2025:00:51:09 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:09 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:10 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:10 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:11 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:12 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:12 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:13 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:13 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:14 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:14 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:15 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:15 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:16 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [15/Dec/2025:00:51:17 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:17 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:18 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:18 +0100] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:19 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:19 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:20 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:20 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:21 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:22 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:22 +0100] "GET /wp-content/w3tc/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:23 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:23 +0100] "GET /wp-content/cache/supercache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:24 +0100] "GET /wp-content/wflogs/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:24 +0100] "GET /wp-content/updraft/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [15/Dec/2025:00:51:25 +0100] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:25 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:26 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:27 +0100] "GET /wp-content/uploads/woocommerce_uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:27 +0100] "GET /wp-content/uploads/woocommerce/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:28 +0100] "GET /wp-content/uploads/wc-logs/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:28 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:29 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:29 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:30 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:30 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:31 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [15/Dec/2025:00:51:31 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:32 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:33 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:33 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:34 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:34 +0100] "GET /wp-includes/js/jcrop/jcrop.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:35 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [15/Dec/2025:00:51:35 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:36 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:36 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:37 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:38 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:38 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:39 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:39 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:40 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [15/Dec/2025:00:51:40 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [15/Dec/2025:00:51:41 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.138.144 - - [15/Dec/2025:01:16:05 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:54 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.234 - - [15/Dec/2025:03:47:54 +0100] "GET /neshe HTTP/1.1" 301 162 "-" "-" 162.158.49.234 - - [15/Dec/2025:03:47:55 +0100] "GET /plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 162.158.49.234 - - [15/Dec/2025:03:47:55 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 162.158.49.234 - - [15/Dec/2025:03:47:55 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:56 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:56 +0100] "GET /disaos.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:56 +0100] "GET /wp-content/themes/wp-pridmag/init.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:57 +0100] "GET /upload/wp-info.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:57 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:57 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:58 +0100] "GET /xc.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:58 +0100] "GET /index/fucku.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:58 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:59 +0100] "GET /inputs.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:59 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:47:59 +0100] "GET /about/function.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:00 +0100] "GET /1.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:00 +0100] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:01 +0100] "GET /chosen.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:01 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:01 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:02 +0100] "GET /dichku.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:02 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:02 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:03 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:03 +0100] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:03 +0100] "GET /wp-configs.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:04 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:04 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:04 +0100] "GET /yanz.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:05 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:05 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:05 +0100] "GET /20.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:06 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:06 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:06 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:07 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:07 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:07 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:08 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:08 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:09 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:09 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:09 +0100] "GET /011i.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:09 +0100] "GET /kk.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:10 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:17 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:18 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:18 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:18 +0100] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:19 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:19 +0100] "GET /d2.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:19 +0100] "GET /css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:20 +0100] "GET /mail.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:20 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:20 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:21 +0100] "GET /wp-cron.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:21 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:21 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:22 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:22 +0100] "GET /gdn.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:22 +0100] "GET /snus.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:23 +0100] "GET /ghreshttryu.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:23 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:23 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:24 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:24 +0100] "GET /tiny.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:24 +0100] "GET /wp-includes/rest-api/fields/index.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:25 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:25 +0100] "GET /wp-includes/system_log.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:25 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:26 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [15/Dec/2025:03:48:26 +0100] "GET /config.php? HTTP/1.1" 301 162 "-" "-" 162.158.182.193 - - [15/Dec/2025:06:57:44 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.221.111 - - [15/Dec/2025:06:59:05 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.162.40 - - [15/Dec/2025:08:49:27 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:28 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:28 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:29 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:29 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:29 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:30 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:30 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:31 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:31 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:32 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:32 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:33 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:33 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:33 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:34 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.163.249 - - [15/Dec/2025:08:49:34 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:35 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:35 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:36 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:36 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:36 +0100] "GET /mini HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:37 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:37 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:38 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:38 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:38 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:39 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:39 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.163.249 - - [15/Dec/2025:08:49:40 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.163.249 - - [15/Dec/2025:08:49:40 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:40 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:41 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:41 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:42 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:42 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:42 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:43 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:43 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:44 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:44 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:44 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:45 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:45 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:46 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:46 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:46 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:47 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:47 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:48 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:48 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:48 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:49 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:49 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:50 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:50 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:50 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:51 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:51 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:52 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:52 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:52 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:53 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:53 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:54 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:54 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:54 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:55 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:55 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:56 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:56 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:56 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:57 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:57 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.162.40 - - [15/Dec/2025:08:49:58 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:49:58 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:58 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:59 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.162.40 - - [15/Dec/2025:08:49:59 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:49:59 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:00 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:00 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:01 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:01 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:01 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:02 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:02 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:03 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:03 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:03 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:04 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:04 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:05 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:05 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:05 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:06 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:06 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:07 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:07 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:07 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:08 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:08 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:09 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:09 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:09 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:10 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:10 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:11 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:11 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:11 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:12 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:12 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.162.40 - - [15/Dec/2025:08:50:12 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:13 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:13 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.40 - - [15/Dec/2025:08:50:14 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.162.40 - - [15/Dec/2025:08:50:14 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.232.81 - - [15/Dec/2025:11:18:29 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.118.133 - - [15/Dec/2025:11:18:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.94.172 - - [15/Dec/2025:11:47:09 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.187.226 - - [15/Dec/2025:13:44:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.159.119.63 - - [15/Dec/2025:13:44:44 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.49.200 - - [15/Dec/2025:14:07:03 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:08 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:09 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:09 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:09 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:10 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:10 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:10 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:12 +0100] "GET /css/sf9.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:12 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:13 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:13 +0100] "GET /pu.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:13 +0100] "GET /666.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:14 +0100] "GET /sfcl.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:14 +0100] "GET /npcs7k.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [15/Dec/2025:14:07:14 +0100] "GET /cro.php HTTP/1.1" 301 162 "-" "-" 162.158.111.90 - - [15/Dec/2025:15:51:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.71.148.183 - - [15/Dec/2025:15:51:26 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.71.255.139 - - [15/Dec/2025:16:59:12 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.71.255.54 - - [15/Dec/2025:16:59:13 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.71.255.54 - - [15/Dec/2025:16:59:13 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.71.255.54 - - [15/Dec/2025:16:59:13 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.71.255.54 - - [15/Dec/2025:16:59:13 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.71.255.54 - - [15/Dec/2025:16:59:13 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.71.255.54 - - [15/Dec/2025:16:59:13 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.71.166.33 - - [15/Dec/2025:17:25:46 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.209.46 - - [15/Dec/2025:21:10:53 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 104.23.209.46 - - [15/Dec/2025:21:10:54 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.209.46 - - [15/Dec/2025:21:10:54 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 104.23.209.46 - - [15/Dec/2025:21:10:54 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.209.46 - - [15/Dec/2025:21:10:54 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 104.23.209.46 - - [15/Dec/2025:21:10:54 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 104.23.209.46 - - [15/Dec/2025:21:10:55 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.10.40 - - [15/Dec/2025:22:40:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.216.173 - - [15/Dec/2025:23:53:55 +0100] "GET / HTTP/1.1" 301 162 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:34 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [16/Dec/2025:01:27:34 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.204 - - [16/Dec/2025:01:27:34 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [16/Dec/2025:01:27:35 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [16/Dec/2025:01:27:35 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [16/Dec/2025:01:27:35 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [16/Dec/2025:01:27:35 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [16/Dec/2025:01:27:36 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [16/Dec/2025:01:27:36 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [16/Dec/2025:01:27:36 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [16/Dec/2025:01:27:36 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.204 - - [16/Dec/2025:01:27:37 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:37 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:37 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:37 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:38 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:38 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:38 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:39 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:39 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:39 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:39 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:40 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:40 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:40 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:40 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [16/Dec/2025:01:27:41 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:41 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:41 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:41 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:42 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:42 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:42 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:42 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:43 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:43 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:43 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:43 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:44 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:44 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:44 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:44 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:45 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:45 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:45 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:45 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [16/Dec/2025:01:27:46 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:46 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:46 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:46 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:47 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:47 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:47 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:48 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:48 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:48 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [16/Dec/2025:01:27:48 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:49 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:49 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:49 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:49 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:50 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:50 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:50 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:50 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [16/Dec/2025:01:27:51 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [16/Dec/2025:01:27:51 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:51 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:51 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [16/Dec/2025:01:27:52 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:52 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [16/Dec/2025:01:27:52 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.246.100 - - [16/Dec/2025:02:59:22 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.111.90 - - [16/Dec/2025:03:00:05 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.38.206 - - [16/Dec/2025:05:21:32 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:32 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:33 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:33 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:33 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:34 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:34 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:34 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:35 +0100] "GET /css/sf9.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:35 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:35 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:36 +0100] "GET /pu.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:36 +0100] "GET /666.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:36 +0100] "GET /sfcl.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:37 +0100] "GET /npcs7k.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [16/Dec/2025:05:21:37 +0100] "GET /cro.php HTTP/1.1" 301 162 "-" "-" 104.23.175.156 - - [16/Dec/2025:05:59:18 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.70.94.173 - - [16/Dec/2025:10:14:05 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.148.123 - - [16/Dec/2025:14:14:10 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.111.89 - - [16/Dec/2025:14:14:59 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.159.122.178 - - [16/Dec/2025:16:08:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71" 172.69.94.23 - - [16/Dec/2025:17:11:46 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.69.95.132 - - [16/Dec/2025:17:11:48 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.69.95.132 - - [16/Dec/2025:17:11:48 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:49 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:50 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:50 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:51 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:51 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:52 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:53 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:53 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:54 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:55 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:55 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:56 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:57 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:57 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:58 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:58 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:11:59 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:00 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:00 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:01 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:02 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:02 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:03 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:03 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:04 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:05 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:06 +0100] "GET /files/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:06 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:07 +0100] "GET /gelay.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:08 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:09 +0100] "GET /god4m.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:09 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:10 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:11 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:11 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:13 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:15 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:15 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:16 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:17 +0100] "GET /public/assets/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:17 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:18 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:18 +0100] "GET /uploads/vx.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:19 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:20 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:20 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:21 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:22 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:23 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:23 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:24 +0100] "GET /wp-admin/css/colors/ectoplasm/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:25 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:26 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:27 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:27 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:28 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:29 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:29 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:30 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:31 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:31 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:32 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:32 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:34 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:34 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:35 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:35 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:36 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:37 +0100] "GET /wp-content/plugins/beteng13/vx.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:38 +0100] "GET /wp-content/plugins/mainhosting/default.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:38 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:39 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:40 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:40 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:41 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:42 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:43 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:43 +0100] "GET /wp-content/vx.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:44 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:45 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:45 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:46 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:46 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:47 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:48 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:49 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:50 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:51 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:51 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:52 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:53 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:53 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:54 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:54 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:55 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:56 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:56 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:57 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:58 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:58 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:12:59 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:00 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:00 +0100] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:01 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:01 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:02 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:03 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:04 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:04 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:05 +0100] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:06 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:06 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:07 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:08 +0100] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:08 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:09 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:09 +0100] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:10 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:11 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:11 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:12 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:13 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:13 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:14 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:14 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:15 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:16 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:16 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:17 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:18 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:18 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [16/Dec/2025:17:13:19 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:10 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.235.195 - - [16/Dec/2025:18:48:11 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.235.195 - - [16/Dec/2025:18:48:12 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.235.195 - - [16/Dec/2025:18:48:13 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 162.158.235.195 - - [16/Dec/2025:18:48:13 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "-" 162.158.235.195 - - [16/Dec/2025:18:48:14 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 162.158.235.195 - - [16/Dec/2025:18:48:14 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:15 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:15 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:16 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:17 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:17 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:18 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:18 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:19 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:19 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:20 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:20 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:21 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:22 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:22 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:23 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:23 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:24 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:24 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:25 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:25 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:26 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:27 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:27 +0100] "GET /files/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:28 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:28 +0100] "GET /gelay.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:29 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:29 +0100] "GET /god4m.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:30 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:30 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:31 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:32 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:32 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:33 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:33 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:34 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:34 +0100] "GET /public/assets/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:35 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:36 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:36 +0100] "GET /uploads/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:37 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:37 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:38 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:38 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:39 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:40 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:40 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:41 +0100] "GET /wp-admin/css/colors/ectoplasm/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:41 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:42 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:42 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:43 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:43 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:44 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:45 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:45 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:46 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:46 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:47 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:47 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:48 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:48 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:49 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:50 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:50 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:51 +0100] "GET /wp-content/plugins/beteng13/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:51 +0100] "GET /wp-content/plugins/mainhosting/default.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:52 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:52 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:53 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:54 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:54 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:55 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:55 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:56 +0100] "GET /wp-content/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:56 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:57 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:57 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:58 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:59 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:48:59 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:00 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:00 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:01 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:01 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:02 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:02 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:03 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:04 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:04 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:05 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:05 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:06 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:06 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:07 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:08 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:08 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:09 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:09 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:10 +0100] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:10 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:11 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:11 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:12 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:13 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:13 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:14 +0100] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:14 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:15 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:15 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:16 +0100] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:16 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:17 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:18 +0100] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:18 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:19 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:19 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:20 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:20 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:21 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:21 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:22 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:23 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:23 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:24 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:24 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:25 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:25 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 162.158.235.218 - - [16/Dec/2025:18:49:26 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.71.172.87 - - [16/Dec/2025:19:04:07 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.148.122 - - [16/Dec/2025:19:04:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.151.200 - - [16/Dec/2025:19:11:07 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.248.199 - - [16/Dec/2025:19:11:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.172.87 - - [16/Dec/2025:19:27:01 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.148.123 - - [16/Dec/2025:19:27:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.138.145 - - [16/Dec/2025:19:53:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 198.41.227.177 - - [16/Dec/2025:20:10:20 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.126.61 - - [16/Dec/2025:21:13:13 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.70.127.185 - - [16/Dec/2025:21:13:13 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.70.127.185 - - [16/Dec/2025:21:13:14 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.70.127.185 - - [16/Dec/2025:21:13:14 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.70.127.185 - - [16/Dec/2025:21:13:14 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.70.127.185 - - [16/Dec/2025:21:13:14 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.70.127.185 - - [16/Dec/2025:21:13:14 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.70.35.121 - - [16/Dec/2025:21:14:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36" 172.68.15.178 - - [16/Dec/2025:21:51:04 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.15.178 - - [16/Dec/2025:21:51:04 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.15.178 - - [16/Dec/2025:21:51:04 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.15.178 - - [16/Dec/2025:21:51:04 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.15.178 - - [16/Dec/2025:21:51:05 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.68.15.178 - - [16/Dec/2025:21:51:05 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.68.15.178 - - [16/Dec/2025:21:51:05 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 162.158.42.75 - - [16/Dec/2025:22:13:35 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.23.178 - - [16/Dec/2025:22:16:06 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.23.190.193 - - [16/Dec/2025:22:39:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.217.153 - - [16/Dec/2025:22:58:22 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/14A346 Safari/602.1" 172.64.200.183 - - [16/Dec/2025:22:58:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Opera/9.23 (Nintendo Wii; U; ; 1038-58; Wii Internet Channel/1.0; en)" 162.158.103.84 - - [16/Dec/2025:22:58:24 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1b3) Gecko/20090305 Firefox/3.1b3 (.NET CLR 3.5.30729)" 104.23.223.132 - - [16/Dec/2025:22:58:26 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 7.1.1; XT1710-02 Build/NDS26.74-36) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36" 162.158.103.84 - - [16/Dec/2025:22:58:26 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-gb; GT-I9300 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 172.64.200.183 - - [16/Dec/2025:22:58:27 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; es-ES; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3" 104.23.221.108 - - [16/Dec/2025:22:58:28 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.110 Safari/537.36" 162.158.172.94 - - [16/Dec/2025:22:58:29 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0" 172.64.198.229 - - [16/Dec/2025:22:58:31 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.91 Safari/537.36" 162.158.103.84 - - [16/Dec/2025:22:58:40 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.0.4; en-gb; GT-I9100 Build/IMM76D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 104.23.221.108 - - [16/Dec/2025:22:58:41 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.174.0 Safari/530.5" 104.23.221.108 - - [16/Dec/2025:22:58:41 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Opera/9.80 (X11; Linux zvav; U; fi) Presto/2.12.423 Version/12.16" 162.158.172.94 - - [16/Dec/2025:22:58:42 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9b5) Gecko/2008032620 Firefox/3.0b5" 172.68.183.72 - - [16/Dec/2025:22:58:43 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; ko-kr) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" 104.23.217.153 - - [16/Dec/2025:22:58:43 +0100] "GET /web/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)" 162.158.103.84 - - [16/Dec/2025:22:58:44 +0100] "GET /.env.bak HTTP/1.1" 301 162 "-" "Opera/9.80 (Android; Opera Mini/24.0.2254/62.178; U; en) Presto/2.12.423 Version/12.16" 162.158.103.84 - - [16/Dec/2025:22:58:45 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.211.2 Safari/532.0" 162.158.103.84 - - [16/Dec/2025:22:58:45 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "ELinks/0.9.3 (textmode; Linux 2.6.9-kanotix-8 i686; 127x41)" 104.23.223.132 - - [16/Dec/2025:22:58:46 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; U; CPU OS 4_3_3 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8J2 Safari/6533.18.5" 172.68.183.72 - - [16/Dec/2025:22:58:46 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.3; en-us; SAMSUNG-SM-N900A Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 162.158.172.94 - - [16/Dec/2025:22:58:47 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36" 172.68.183.72 - - [16/Dec/2025:22:58:47 +0100] "GET /images/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/3.0.195.1 Safari/532.0" 162.158.172.94 - - [16/Dec/2025:22:58:48 +0100] "GET /.env.save.1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_4; th-th) AppleWebKit/533.17.8 (KHTML, like Gecko) Version/5.0.1 Safari/533.17.8" 104.23.221.108 - - [16/Dec/2025:22:58:50 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_5; sv-se) AppleWebKit/525.26.2 (KHTML, like Gecko) Version/3.2 Safari/525.26.12" 162.158.103.84 - - [16/Dec/2025:22:58:50 +0100] "GET /API/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" 162.158.103.84 - - [16/Dec/2025:22:58:50 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0) Gecko/20100101 Firefox/4.0" 172.68.183.72 - - [16/Dec/2025:22:58:51 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101206 Firefox/3.6.13" 172.69.94.23 - - [17/Dec/2025:00:26:03 +0100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:04 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:05 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:06 +0100] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:06 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:07 +0100] "GET /wp-includes/bk/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:07 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:08 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:08 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:09 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:10 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:10 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:11 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:11 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:12 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:12 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:13 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:14 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:14 +0100] "GET /img/post.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:15 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:15 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:16 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:16 +0100] "GET /sim.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:17 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:17 +0100] "GET /update/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:18 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:19 +0100] "GET /wp-includes/blocks/comments/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:19 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:20 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:20 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:21 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:21 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:22 +0100] "GET /uploads/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:23 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:23 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:24 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:24 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:25 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:25 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:26 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:27 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:27 +0100] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:28 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:28 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:29 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:29 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:30 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:30 +0100] "GET /2021/01/16/upload-and-download-file-using-multipart-form-over- HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:31 +0100] "GET /WSO.php HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:32 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:32 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:33 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:33 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:34 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:34 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "-" 172.69.94.23 - - [17/Dec/2025:00:26:35 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:47 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.68.210.58 - - [17/Dec/2025:01:44:48 +0100] "GET /.well-known/worksec.php HTTP/1.1" 301 162 "-" "-" 172.68.210.58 - - [17/Dec/2025:01:44:49 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.68.210.58 - - [17/Dec/2025:01:44:49 +0100] "GET /wp-set.php HTTP/1.1" 301 162 "-" "-" 172.68.210.58 - - [17/Dec/2025:01:44:49 +0100] "GET /ah22.php HTTP/1.1" 301 162 "-" "-" 172.68.210.58 - - [17/Dec/2025:01:44:50 +0100] "GET /styll.php HTTP/1.1" 301 162 "-" "-" 172.68.210.58 - - [17/Dec/2025:01:44:50 +0100] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.58 - - [17/Dec/2025:01:44:51 +0100] "GET /wfile.php HTTP/1.1" 301 162 "-" "-" 172.68.210.58 - - [17/Dec/2025:01:44:51 +0100] "GET /wp-includes/assets/zxl.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:51 +0100] "GET /css/sf9.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:52 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:52 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:53 +0100] "GET /pu.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:53 +0100] "GET /sfcl.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:53 +0100] "GET /npcs7k.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:54 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:54 +0100] "GET /cro.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:55 +0100] "GET /egu.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:55 +0100] "GET /doo.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:55 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:56 +0100] "GET /wakak.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:56 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:57 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:57 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:58 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:59 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:44:59 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:00 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:00 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:00 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:01 +0100] "GET /aves.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:01 +0100] "GET /images/chosen.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:01 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:02 +0100] "GET /manage.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:02 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:03 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:03 +0100] "GET /first.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:03 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:04 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:04 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:05 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:05 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:05 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:06 +0100] "GET /mh.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:06 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:06 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:07 +0100] "GET /usep.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:07 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:08 +0100] "GET /asd67.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:08 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:08 +0100] "GET /rss.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:09 +0100] "GET /wpls.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:09 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:10 +0100] "GET /zeal.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:10 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:11 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:11 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:12 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:12 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:12 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:13 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:13 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:14 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:14 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:14 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:15 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:15 +0100] "GET /wp-content/json.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:16 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:16 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:17 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:17 +0100] "GET /loads.PhP HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:17 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:18 +0100] "GET /wp-admin/update.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:19 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:19 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:20 +0100] "GET /2r.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:20 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:21 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:21 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:21 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:22 +0100] "GET /wsvvs.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:22 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:23 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:23 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:23 +0100] "GET /666.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:24 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:24 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:25 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:25 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:25 +0100] "GET /qlex1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:26 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:26 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:26 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:27 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:27 +0100] "GET /wp-includes/mah.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [17/Dec/2025:01:45:27 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:01 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:01 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:02 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:02 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:02 +0100] "GET /v3.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:03 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:03 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:03 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:04 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:04 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:04 +0100] "GET /habhan.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:05 +0100] "GET /mans.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:05 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:05 +0100] "GET /yas.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:06 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:06 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:06 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:07 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:07 +0100] "GET /blox.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:07 +0100] "GET /scx.php7 HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:08 +0100] "GET /siln.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:08 +0100] "GET /mtvcrew.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:08 +0100] "GET /111.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:09 +0100] "GET /raw.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:09 +0100] "GET /great.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:09 +0100] "GET /akcc.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:10 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:10 +0100] "GET /moon.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:10 +0100] "GET /shoha.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:11 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:11 +0100] "GET /sallu.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:11 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:12 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:12 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:12 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:13 +0100] "GET /acp.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:13 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:13 +0100] "GET /wp-is.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:14 +0100] "GET /zxin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.223 - - [17/Dec/2025:01:55:14 +0100] "GET /pass.php HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [17/Dec/2025:04:57:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 172.70.42.179 - - [17/Dec/2025:06:07:08 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 104.23.211.195 - - [17/Dec/2025:06:07:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 162.158.87.62 - - [17/Dec/2025:07:47:27 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.184.46 - - [17/Dec/2025:07:48:45 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 141.101.96.60 - - [17/Dec/2025:07:57:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 172.68.22.143 - - [17/Dec/2025:08:42:25 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.68.23.178 - - [17/Dec/2025:08:42:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.70.94.172 - - [17/Dec/2025:08:49:49 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 141.101.84.237 - - [17/Dec/2025:08:58:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:02 +0100] "GET /zc-729.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:03 +0100] "GET /yas.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:03 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:04 +0100] "GET /tesTyuj.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:04 +0100] "GET /z60.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:04 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:05 +0100] "GET /ww3.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:05 +0100] "GET /clss.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:05 +0100] "GET /budmachine/web/s.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:06 +0100] "GET /wp-64wscx6shd.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:06 +0100] "GET /okxh.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:07 +0100] "GET /wp-sid.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:07 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:07 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:08 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:08 +0100] "GET /wp-title.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:08 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:09 +0100] "GET /wp-home.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:10 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:10 +0100] "GET /atex1.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:11 +0100] "GET /kdgok.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:12 +0100] "GET /vanda.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:12 +0100] "GET /bolt.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:12 +0100] "GET /sid-file.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:13 +0100] "GET /l3gi0n.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:14 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:14 +0100] "GET /bo.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:14 +0100] "GET /d12.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:15 +0100] "GET /Contrller.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:15 +0100] "GET /o2.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:15 +0100] "GET /error_log.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:16 +0100] "GET /inghl.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:16 +0100] "GET /wp-securitiy.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:17 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:17 +0100] "GET /wp-ac.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:17 +0100] "GET /krypton.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:18 +0100] "GET /karma_57c3d4.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:19 +0100] "GET /fc72f.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:19 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:19 +0100] "GET /jjrpo.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:20 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:20 +0100] "GET /wp-advaced.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:20 +0100] "GET /asd.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:21 +0100] "GET /xtt.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:21 +0100] "GET /s.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:22 +0100] "GET /t.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:22 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:23 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:23 +0100] "GET /jdlqi.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:23 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:24 +0100] "GET /khgdl.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:24 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:24 +0100] "GET /ghreshttryu.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:25 +0100] "GET /xopvne.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:25 +0100] "GET /lm18.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:26 +0100] "GET /5b9ac.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:26 +0100] "GET /co.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:26 +0100] "GET /56c53.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:27 +0100] "GET /ce.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:27 +0100] "GET /domains.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:27 +0100] "GET /55b76.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:28 +0100] "GET /asa.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:28 +0100] "GET /4fk6.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:28 +0100] "GET /z123.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:29 +0100] "GET /dox.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:29 +0100] "GET /ccea.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:29 +0100] "GET /a5e0a.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:30 +0100] "GET /qaez.php56 HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:30 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:31 +0100] "GET /s121ws2s.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:31 +0100] "GET /ww1.php?= HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:32 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:32 +0100] "GET /ww3.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:32 +0100] "GET /783de.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:33 +0100] "GET /lm15.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:33 +0100] "GET /gdn.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:33 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:34 +0100] "GET /3i8som87avh59dosfymtvCakc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:34 +0100] "GET /rzki.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:34 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:35 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:35 +0100] "GET /6kUgr4yGzxN.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:35 +0100] "GET /file30.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:36 +0100] "GET /rp8zi.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:36 +0100] "GET /cc3.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:37 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:37 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:37 +0100] "GET /wps.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:39 +0100] "GET /qV9GbcJwZgK.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:39 +0100] "GET /qsntqiho.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:39 +0100] "GET /qjaqjahu.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:40 +0100] "GET /qhLaGswd9DS.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:41 +0100] "GET /pwyjwrfr.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:41 +0100] "GET /pNRzcP6wtYy.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:41 +0100] "GET /ox8xhkkw.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:42 +0100] "GET /oc460l3x.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:42 +0100] "GET /NWqz649FIe7.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:42 +0100] "GET /nucqsqeg.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:43 +0100] "GET /mhpglaje.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:43 +0100] "GET /LvCBeZWaSgQ.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:44 +0100] "GET /KV7EGJmhHzX.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:44 +0100] "GET /ijNdPI1Orya.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:45 +0100] "GET /HPum4ZEBJRC.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:45 +0100] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:45 +0100] "GET /8xg5Bv6XIUw.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:46 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:47 +0100] "GET /aGeTbFjB5Zu.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:47 +0100] "GET /BMjXQkgwpeb.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:48 +0100] "GET /FSCMNvnjPX4.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:48 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:48 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:49 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:49 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:50 +0100] "GET /hello.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:50 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:51 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:51 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:51 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:52 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:52 +0100] "GET /dejavu.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:53 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:54 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [17/Dec/2025:08:58:54 +0100] "GET /about.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:05 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.71.8.56 - - [17/Dec/2025:09:07:05 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.56 - - [17/Dec/2025:09:07:06 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:06 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:06 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:06 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:07 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:07 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:07 +0100] "GET /wp-content/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:07 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:08 +0100] "GET /.well-known/acme-challenge/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:08 +0100] "GET /wp-content/plugins/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:08 +0100] "GET /text.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:08 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:09 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:09 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:09 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:10 +0100] "GET /wp-includes/blocks/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:10 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:10 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:10 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:11 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:11 +0100] "GET /wp-content/languages/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:11 +0100] "GET /wp-admin/includes/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:11 +0100] "GET /css/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:12 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:12 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:12 +0100] "GET /wp-includes/IXR/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:12 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:13 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:13 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:13 +0100] "GET /.well-known/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:13 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:14 +0100] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:14 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:14 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:14 +0100] "GET /wp-content/themes/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:15 +0100] "GET /wp-includes/Requests/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:15 +0100] "GET /wp-includes/images/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:15 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:16 +0100] "GET /wp-info.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:16 +0100] "GET /wp-includes/style-engine/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:16 +0100] "GET /wp-admin/images/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:16 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:17 +0100] "GET /wp-admin/maint/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:17 +0100] "GET /index.html HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:17 +0100] "GET /wp-admin/maint/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:17 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:18 +0100] "GET /wp-admin/js/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:18 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:18 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:19 +0100] "GET /wp-admin/css/colors/blue/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:19 +0100] "GET /cgi-bin/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:19 +0100] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:19 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:20 +0100] "GET /wp-includes/IXR/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:20 +0100] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:20 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:20 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:21 +0100] "GET /wp-admin/includes/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:21 +0100] "GET /shell20211028.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:21 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:22 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:22 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:22 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:22 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:23 +0100] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:23 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:23 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:23 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:24 +0100] "GET /wp-includes/SimplePie/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:24 +0100] "GET /chosen HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:24 +0100] "GET /wp-includes/SimplePie/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:24 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:25 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:25 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:25 +0100] "GET /wp-content/languages/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:26 +0100] "GET /wp-content/plugins/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:26 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:26 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:26 +0100] "GET /wp-admin/css/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:27 +0100] "GET /wp-content/themes/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:27 +0100] "GET /wp-includes/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:27 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:27 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:28 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:28 +0100] "GET /widgets.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:28 +0100] "GET /wp-content/plugins/revslider/includes/external/page/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:28 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:29 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:29 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:29 +0100] "GET /.well-known/acme-challenge/file HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:29 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:30 +0100] "GET /wp-admin/css/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:30 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:30 +0100] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:30 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:31 +0100] "GET /wp-includes/wp-load.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:31 +0100] "GET /cgi-bin/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:31 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:32 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:32 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:32 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:32 +0100] "GET /upfile.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:33 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:33 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:33 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:33 +0100] "GET /updates.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:34 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:34 +0100] "GET /ae.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:34 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:34 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:35 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:35 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:35 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:35 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:36 +0100] "GET /wp-sigunq.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:36 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:36 +0100] "GET /fw.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:36 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:37 +0100] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:37 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:37 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:38 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:38 +0100] "GET /wp-comments-post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:38 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:38 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:39 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:39 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:39 +0100] "GET /plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:39 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:40 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:40 +0100] "GET /2post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:40 +0100] "GET /C.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:40 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:41 +0100] "GET /01.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:41 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:41 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:41 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:42 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:42 +0100] "GET /wp-22.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:42 +0100] "GET /1post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:42 +0100] "GET /marijuana.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:43 +0100] "GET /good.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:43 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:43 +0100] "GET /crack_self_restore.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:44 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:44 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:44 +0100] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:44 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:45 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:45 +0100] "GET /wp-content/plugins/wpsml-sys.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:45 +0100] "GET /.well-known/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:45 +0100] "GET /wp-includes/ID3/themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:46 +0100] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:46 +0100] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:46 +0100] "GET /wp-includes/SimplePie/network.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:46 +0100] "GET /images/options.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:47 +0100] "GET /session.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:47 +0100] "GET /wp-includes/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:47 +0100] "GET /wp-apxupx.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:47 +0100] "GET /.well-known/pki-validation/bb.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:48 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:48 +0100] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:48 +0100] "GET /.well-known/class.api.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:48 +0100] "GET /wp-content/themes/twentytwentytwo/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:49 +0100] "GET /ova-tools.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:49 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:49 +0100] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:49 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:50 +0100] "GET /abe.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:50 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:50 +0100] "GET /gallery HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:50 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:51 +0100] "GET /.well-known/pki-validation/link.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:51 +0100] "GET /wp-admin/css/colors/a.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:51 +0100] "GET /yanz.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:52 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:52 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:52 +0100] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:52 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:53 +0100] "GET /wp-admin/images/as.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:53 +0100] "GET /sidwsi.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:53 +0100] "GET /upgrade.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:53 +0100] "GET /.well-known/991176.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:54 +0100] "GET /wp-includes/certificates/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:54 +0100] "GET /wp-admin/css/colors/blue/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:54 +0100] "GET /minik.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:54 +0100] "GET /options.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:55 +0100] "GET /wp-admin/images/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:55 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:55 +0100] "GET /wp-admin/maint/sidebara.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:55 +0100] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:56 +0100] "GET /wp-includes/theme-compat/embed-core.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:56 +0100] "GET /wp-includes/options.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:56 +0100] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:57 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:57 +0100] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:57 +0100] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:57 +0100] "GET /wp-mail.php/wp-includes/ID3/getid3s.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:58 +0100] "GET /wp-content/batm.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:58 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:58 +0100] "GET /wp-admin/product.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:58 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:59 +0100] "GET /moon.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:59 +0100] "GET /wp-admin/user/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:59 +0100] "GET /wp-includes/theme-compat/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:07:59 +0100] "GET /worksec.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:00 +0100] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:00 +0100] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:00 +0100] "GET /wp-admin/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:00 +0100] "GET /siteheads.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:01 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:01 +0100] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:01 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:01 +0100] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:02 +0100] "GET /wp-includes/assets/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:02 +0100] "GET /wp-content/plugins/wp-help/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:02 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:02 +0100] "GET /wp-config-sample.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:03 +0100] "GET /wp-includes/1post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:03 +0100] "GET /wp_wrong_datlib.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:03 +0100] "GET /wikpost.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:04 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:04 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:04 +0100] "GET /wp-content/fw.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:04 +0100] "GET /wp-admin/fx.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:05 +0100] "GET /4price.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:05 +0100] "GET /utchiha.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:05 +0100] "GET /wp-admin/priv8.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:05 +0100] "GET /wp-admin/rss.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:06 +0100] "GET /uploads/xleet.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:06 +0100] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:06 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:06 +0100] "GET /wp-admin/includes/mar.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:07 +0100] "GET /wp-content/plugins/pwnd-1/as.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:07 +0100] "GET /cgi-bin/cgi-bin/post.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:07 +0100] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:07 +0100] "GET /wp-includes/css/core.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:08 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:08 +0100] "GET /wp-includes/ID3/install.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:08 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:08 +0100] "GET /.well-known/cong.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:09 +0100] "GET /.wp-cli/as.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:09 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:09 +0100] "GET /wp-admin/css/colors/coffee/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:09 +0100] "GET /vendor/composer/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:10 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:10 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:10 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:11 +0100] "GET /wp-includes/rest-api/fields/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:11 +0100] "GET /wp-includes/images/media/rk2.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:11 +0100] "GET /wp-includes/ID3/options.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:11 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:12 +0100] "GET /.well-known/pki-validation/cifcxgxm.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:12 +0100] "GET /wp-content/uploads/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:12 +0100] "GET /wp-admin/users.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:12 +0100] "GET /.well-known/elp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:13 +0100] "GET /wp-includes/fonts/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:13 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:13 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:13 +0100] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:14 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:14 +0100] "GET /wp-content/upgrade/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:14 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:15 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:15 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:15 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:15 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:16 +0100] "GET /wp-content/plugins/install.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:16 +0100] "GET /wp-content/plugins/aioseoextensions/file.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:16 +0100] "GET /wp-content/mah.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:16 +0100] "GET /wp-files.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:17 +0100] "GET /wp-admin/cong.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:17 +0100] "GET /alfanew.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:17 +0100] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:17 +0100] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:18 +0100] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:18 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:18 +0100] "GET /upload.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:18 +0100] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:19 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:19 +0100] "GET /post.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:19 +0100] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:19 +0100] "GET /options-discussion.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:20 +0100] "GET /tiny.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:20 +0100] "GET /wp-includes/class-wp-pages.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:20 +0100] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:21 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:21 +0100] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:21 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:21 +0100] "GET /wp-includes/product.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:22 +0100] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:22 +0100] "GET /gif.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:22 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:22 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:23 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:23 +0100] "GET /wp-content/plugins/item.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:23 +0100] "GET /ethan.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:23 +0100] "GET /wp-content/plugins/pwnd/a.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:24 +0100] "GET /defaults.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:24 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:24 +0100] "GET /wp-includes/SimplePie/Decode/lv.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:24 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:25 +0100] "GET /mycommand.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:25 +0100] "GET /.well-known/wp-2019.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:25 +0100] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:25 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:26 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:26 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:26 +0100] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:26 +0100] "GET /wp/abe.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:27 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:27 +0100] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:27 +0100] "GET /berlin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:28 +0100] "GET /wp-admin/network/post.php/.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:28 +0100] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:28 +0100] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:28 +0100] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:29 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:29 +0100] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:29 +0100] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:29 +0100] "GET /.well-known/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:29 +0100] "GET /.well-known/dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:30 +0100] "GET /.well-known/file.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:30 +0100] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:30 +0100] "GET /.well-known/pki-validation/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:31 +0100] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:31 +0100] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:31 +0100] "GET /.well-known/pki-validation/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:31 +0100] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:32 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:32 +0100] "GET /.well-known/wp-load.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:32 +0100] "GET /.well-known/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:32 +0100] "GET /post.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:33 +0100] "GET /admin-post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:33 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:33 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:33 +0100] "GET /ajax-actions.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:34 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:34 +0100] "GET /alfa-rex2.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:34 +0100] "GET /alfanew2.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:34 +0100] "GET /avaa.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:35 +0100] "GET /cache-compat.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:35 +0100] "GET /cgi-bin/404.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:35 +0100] "GET /cgi-bin/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:35 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:36 +0100] "GET /cgi-bin/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:36 +0100] "GET /cgi-bin/themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:36 +0100] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:36 +0100] "GET /cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:37 +0100] "GET /contact.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:37 +0100] "GET /css/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:37 +0100] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:37 +0100] "GET /ebs.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:38 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:38 +0100] "GET /files/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:38 +0100] "GET /images/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:38 +0100] "GET /images/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:39 +0100] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:39 +0100] "GET /img/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:39 +0100] "GET /img/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:40 +0100] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:40 +0100] "GET /libraries/legacy/updates.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:40 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:40 +0100] "GET /libraries/vendor/updates.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:41 +0100] "GET /lufix.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:41 +0100] "GET /media.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:41 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:41 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:42 +0100] "GET /wp-admin/404.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:42 +0100] "GET /wp-admin/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:42 +0100] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:42 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:43 +0100] "GET /wp-admin/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:43 +0100] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:43 +0100] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:43 +0100] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:44 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:44 +0100] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:44 +0100] "GET /wp-admin/css/colors/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:44 +0100] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:45 +0100] "GET /wp-admin/css/license.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:45 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:45 +0100] "GET /wp-admin/dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:46 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:46 +0100] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:46 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:46 +0100] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:47 +0100] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:47 +0100] "GET /wp-admin/js/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:47 +0100] "GET /wp-admin/js/widgets/post.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:47 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:48 +0100] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:48 +0100] "GET /wp-admin/license.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:48 +0100] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:48 +0100] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:49 +0100] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:49 +0100] "GET /wp-admin/repeater.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:49 +0100] "GET /wp-admin/themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:49 +0100] "GET /wp-admin/user/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:50 +0100] "GET /wp-admin/user/themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:50 +0100] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:50 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:50 +0100] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:51 +0100] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:51 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:51 +0100] "GET /wp-consar.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:51 +0100] "GET /wp-content/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:52 +0100] "GET /wp-content/banners/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:52 +0100] "GET /wp-content/blogs.dir/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:52 +0100] "GET /wp-content/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:53 +0100] "GET /wp-content/dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:53 +0100] "GET /wp-content/gallery/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:53 +0100] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:53 +0100] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:54 +0100] "GET /wp-content/plugins/dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:54 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:54 +0100] "GET /wp-content/plugins/not/includes/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:54 +0100] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:55 +0100] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:55 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:55 +0100] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:55 +0100] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:56 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:56 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:56 +0100] "GET /wp-content/repeater.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:56 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:57 +0100] "GET /wp-content/themes/404.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:57 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:57 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:57 +0100] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:58 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:58 +0100] "GET /wp-content/themes/themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:58 +0100] "GET /wp-content/updates.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:58 +0100] "GET /wp-content/updraft/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:59 +0100] "GET /wp-content/upgrade-temp-backup/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:59 +0100] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:08:59 +0100] "GET /wp-content/upgrade/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:00 +0100] "GET /wp-includes.bak/html-api/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:00 +0100] "GET /wp-includes/404.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:00 +0100] "GET /wp-includes/ID3/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:00 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:01 +0100] "GET /wp-includes/Text/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:01 +0100] "GET /wp-includes/bak.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:01 +0100] "GET /wp-includes/block-patterns/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:02 +0100] "GET /wp-includes/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:02 +0100] "GET /wp-includes/customize/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:02 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:03 +0100] "GET /wp-includes/images/css.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:03 +0100] "GET /wp-includes/pomo/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:03 +0100] "GET /wp-includes/repeater.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:04 +0100] "GET /wp-includes/rest-api/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:04 +0100] "GET /wp-includes/system_log.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:04 +0100] "GET /wp-includes/themes.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:04 +0100] "GET /wp-includes/widgets/post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:05 +0100] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:05 +0100] "GET /wp-includes/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:05 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:05 +0100] "GET /wp-p.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:06 +0100] "GET /ws.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:06 +0100] "GET /wsoyanz.php HTTP/1.1" 301 162 "-" "-" 172.71.8.78 - - [17/Dec/2025:09:09:06 +0100] "GET /xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 104.22.20.234 - - [17/Dec/2025:13:30:14 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.166.125 - - [17/Dec/2025:14:57:41 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.47.30 - - [17/Dec/2025:14:57:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.63.51 - - [17/Dec/2025:15:14:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.159.119.63 - - [17/Dec/2025:15:14:28 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.221.110 - - [17/Dec/2025:15:17:57 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.94.201 - - [17/Dec/2025:15:18:22 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.68.15.178 - - [17/Dec/2025:16:17:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" 172.71.1.146 - - [17/Dec/2025:18:40:39 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.69.58.116 - - [17/Dec/2025:18:40:40 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.69.58.116 - - [17/Dec/2025:18:40:40 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.69.58.116 - - [17/Dec/2025:18:40:40 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.69.58.116 - - [17/Dec/2025:18:40:40 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.69.58.116 - - [17/Dec/2025:18:40:40 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.69.58.116 - - [17/Dec/2025:18:40:41 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 104.23.211.195 - - [17/Dec/2025:19:22:41 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 104.23.211.195 - - [17/Dec/2025:19:22:42 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 104.23.211.195 - - [17/Dec/2025:19:22:42 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.211.195 - - [17/Dec/2025:19:22:42 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 104.23.211.195 - - [17/Dec/2025:19:22:42 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 104.23.211.195 - - [17/Dec/2025:19:22:42 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 104.23.211.195 - - [17/Dec/2025:19:22:43 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.71.134.112 - - [17/Dec/2025:19:54:50 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.68.151.69 - - [17/Dec/2025:19:54:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.110.144 - - [17/Dec/2025:20:54:58 +0100] "GET /.tmb/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.111.58 - - [17/Dec/2025:20:54:58 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:54:59 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:54:59 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:54:59 +0100] "GET /.well-known/cong.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:00 +0100] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:00 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:00 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:01 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:01 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:01 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:02 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:02 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:02 +0100] "GET /.well-known/acme-challenge/class-wp-type-registroy.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:03 +0100] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:03 +0100] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:03 +0100] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:03 +0100] "GET /.well-known/acme-challenge/cong.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:04 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:04 +0100] "GET /.well-known/acme-challenge/hasna.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:04 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:05 +0100] "GET /.well-known/acme-challenge/init-widgets-sitemaps.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:05 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:05 +0100] "GET /.well-known/acme-challenge/oesmsspq.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:06 +0100] "GET /.well-known/acme-challenge/setting.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:06 +0100] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:06 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:07 +0100] "GET /.well-known/acme-challenge/xa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:07 +0100] "GET /.well-known/acme-challenge/xml_domit_parser.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:07 +0100] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:07 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:08 +0100] "GET /.well-known/alfacgiapi/getdir.alfa HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:08 +0100] "GET /.well-known/as.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:08 +0100] "GET /.well-known/chris.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:09 +0100] "GET /.well-known/chtmlfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:09 +0100] "GET /.well-known/class-wp-type-registroy.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:09 +0100] "GET /.well-known/default_folders.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:10 +0100] "GET /.well-known/dormunt.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:10 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:11 +0100] "GET /.well-known/file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:11 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:11 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:12 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:12 +0100] "GET /.well-known/js.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:12 +0100] "GET /.well-known/lufix.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:13 +0100] "GET /.well-known/marsvf.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:13 +0100] "GET /.well-known/metrol.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:13 +0100] "GET /.well-known/notice.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:14 +0100] "GET /.well-known/oc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:14 +0100] "GET /.well-known/pki-validation/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:14 +0100] "GET /.well-known/pki-validation/content.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:15 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:15 +0100] "GET /.well-known/pki-validation/samll.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:15 +0100] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:15 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:16 +0100] "GET /.well-known/pki-validation/agcsekli.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:16 +0100] "GET /.well-known/pki-validation/aivsmiif.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:16 +0100] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:17 +0100] "GET /.well-known/pki-validation/bhxkovra.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:17 +0100] "GET /.well-known/pki-validation/chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:17 +0100] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:18 +0100] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:18 +0100] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:18 +0100] "GET /.well-known/pki-validation/db-update.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:19 +0100] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:19 +0100] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:19 +0100] "GET /.well-known/pki-validation/functions.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:19 +0100] "GET /.well-known/pki-validation/gevgbnbn.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:20 +0100] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:20 +0100] "GET /.well-known/pki-validation/init-rest-rss.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:20 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:21 +0100] "GET /.well-known/pki-validation/linus.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:21 +0100] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:21 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:22 +0100] "GET /.well-known/pki-validation/pki.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:22 +0100] "GET /.well-known/pki-validation/prosellers.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:22 +0100] "GET /.well-known/pki-validation/sidebar-widescreen.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:23 +0100] "GET /.well-known/pki-validation/sts.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:23 +0100] "GET /.well-known/pki-validation/termps.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:23 +0100] "GET /.well-known/pki-validation/tllmdqdr.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:23 +0100] "GET /.well-known/pki-validation/update.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:24 +0100] "GET /.well-known/pki-validation/upfile.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:24 +0100] "GET /.well-known/pki-validation/vhmkzzou.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:24 +0100] "GET /.well-known/pki-validation/wp-IfLu8-class.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:25 +0100] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:25 +0100] "GET /.well-known/pki-validation/xl2023.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:25 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:26 +0100] "GET /.well-known/pki.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:26 +0100] "GET /.well-known/plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:26 +0100] "GET /.well-known/scrfmbnu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:27 +0100] "GET /.well-known/seosorgula.com.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:27 +0100] "GET /.well-known/server.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:27 +0100] "GET /.well-known/shxrrldh.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:28 +0100] "GET /.well-known/subirfoto.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:28 +0100] "GET /.well-known/uBET.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:28 +0100] "GET /.well-known/wp-admn.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:29 +0100] "GET /.well-known/zhborlja.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:29 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:29 +0100] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:29 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:30 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:30 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:30 +0100] "GET /7.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:31 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:31 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:31 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:32 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:32 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:32 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:33 +0100] "GET /fonts/img.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:33 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:33 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:34 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:34 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:34 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:35 +0100] "GET /upload.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:35 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:35 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:36 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:36 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:36 +0100] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:37 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:37 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:37 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:38 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:38 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:38 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:39 +0100] "GET /wp-content/plugins/char/lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:39 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:39 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:40 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:40 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:40 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:40 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:41 +0100] "GET /wp-content/themes/twentytwentyfour HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:41 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:41 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:42 +0100] "GET /yasnu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:42 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:42 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:43 +0100] "GET /0z.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:43 +0100] "GET /1.php7 HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:43 +0100] "GET /10.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:44 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:44 +0100] "GET /123.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:44 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:45 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:45 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:45 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:46 +0100] "GET /about.php7 HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:46 +0100] "GET /about.php?525 HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:46 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:47 +0100] "GET /about/function.php/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:47 +0100] "GET /access.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:47 +0100] "GET /admin-functions.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:48 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:48 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:48 +0100] "GET /admin.php/uploads/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:49 +0100] "GET /admin.php?p HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:49 +0100] "GET /admin/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:49 +0100] "GET /admin/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:49 +0100] "GET /admin/blogUpload/wp-ver.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:50 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:50 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:50 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:51 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:51 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:51 +0100] "GET /admin/image/105921cccccc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:52 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:52 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:52 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:53 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:53 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:53 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:54 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:54 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:54 +0100] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:55 +0100] "GET /aeckwuws.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:55 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:55 +0100] "GET /akc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:56 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:56 +0100] "GET /alf.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:56 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:57 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:57 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:57 +0100] "GET /alfanew.PhP7 HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:58 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:58 +0100] "GET /alfanew.php7 HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:58 +0100] "GET /alfanew2.php7 HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:59 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:59 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:55:59 +0100] "GET /an7.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:00 +0100] "GET /ant.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:00 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:00 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:01 +0100] "GET /app/webroot/filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:01 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:01 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:01 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:02 +0100] "GET /asd.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:02 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:02 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:03 +0100] "GET /assets/images/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:03 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:03 +0100] "GET /assets/images/doc.php/.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:04 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:04 +0100] "GET /assets/plugins/fancybox/mainhack.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:04 +0100] "GET /async-upload.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:05 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:05 +0100] "GET /ava.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:05 +0100] "GET /back.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:06 +0100] "GET /backoffice/portraits/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:06 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:06 +0100] "GET /bala.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:07 +0100] "GET /batm.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:07 +0100] "GET /bengi.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:07 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:08 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:08 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:08 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:09 +0100] "GET /blog/fw.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:09 +0100] "GET /blog/moo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:09 +0100] "GET /blog/wp-content/plugins/prenota/alpha.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:10 +0100] "GET /blox.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:10 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:10 +0100] "GET /browse.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:11 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:11 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:11 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:12 +0100] "GET /conf_upload.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:12 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:12 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:12 +0100] "GET /connects.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:13 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:13 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:13 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:14 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:14 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:14 +0100] "GET /css/cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:15 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:15 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:15 +0100] "GET /css/plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:16 +0100] "GET /ctveaklx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:16 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:16 +0100] "GET /cux.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:17 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:17 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:17 +0100] "GET /fm1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:18 +0100] "GET /footer.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:18 +0100] "GET /fox.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:19 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:19 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:19 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:20 +0100] "GET /fw.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:20 +0100] "GET /fx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:20 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:21 +0100] "GET /gecko.php/.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:21 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:21 +0100] "GET /gelay.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:21 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:22 +0100] "GET /help.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:22 +0100] "GET /hilk.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:22 +0100] "GET /images/Xleet.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:23 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:23 +0100] "GET /images/alumni_reg.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:23 +0100] "GET /images/atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:24 +0100] "GET /images/bannerads/1578087141_v3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:24 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:24 +0100] "GET /images/contato.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:25 +0100] "GET /images/css.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:25 +0100] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:25 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:26 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:26 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:26 +0100] "GET /images/nxc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:27 +0100] "GET /images/phpimage.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:27 +0100] "GET /images/profiles/cyber.jpg.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:27 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:28 +0100] "GET /images/test.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:28 +0100] "GET /images/thumb.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:28 +0100] "GET /img/nxc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:29 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:29 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:29 +0100] "GET /includes.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:30 +0100] "GET /index.bak.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:30 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:30 +0100] "GET /index/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:31 +0100] "GET /index3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:31 +0100] "GET /index_bak.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:31 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:32 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:32 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:32 +0100] "GET /ioxi-rex4.php7 HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:32 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:33 +0100] "GET /ioxi2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:33 +0100] "GET /tempfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:33 +0100] "GET /templates/beez3/error.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:34 +0100] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:34 +0100] "GET /term.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:34 +0100] "GET /termps.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:35 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:35 +0100] "GET /test/test.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:35 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:36 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:36 +0100] "GET /thoms.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:36 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:37 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:37 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:37 +0100] "GET /tlvs8pou.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:38 +0100] "GET /tools.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:38 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:38 +0100] "GET /up.php?x= HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:39 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:39 +0100] "GET /upload HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:39 +0100] "GET /upload/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:40 +0100] "GET /upload/gpt-sh2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:40 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:40 +0100] "GET /upload/upload.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:41 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:41 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:41 +0100] "GET /uploads/file_upload.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:42 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:42 +0100] "GET /uploads/phpimage.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:42 +0100] "GET /uploads/slot-gacor-uang-asli.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:42 +0100] "GET /uploads/up.php HTTP/1.1" 301 162 "-" "-" 172.71.110.144 - - [17/Dec/2025:20:56:43 +0100] "GET /uploads/upload-size.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [17/Dec/2025:22:15:53 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:15:54 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:15:55 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:15:55 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:15:55 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:15:56 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:15:56 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:15:57 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:15:57 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:15:57 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:15:58 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:15:58 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:15:59 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:15:59 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:00 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:00 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:00 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:01 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:01 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:02 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.176.91 - - [17/Dec/2025:22:16:02 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:02 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:03 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:03 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:04 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:04 +0100] "GET /images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:04 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.176.91 - - [17/Dec/2025:22:16:05 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:05 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:06 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:06 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:07 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:07 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:07 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:08 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:08 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:09 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:09 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:09 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:10 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:10 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:11 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:11 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:12 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:12 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:12 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:13 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:13 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:14 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:14 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:14 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:15 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:15 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:16 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:16 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:16 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:17 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:17 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.176.91 - - [17/Dec/2025:22:16:18 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:18 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:19 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:19 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:19 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:20 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:20 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:21 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:21 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:21 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:22 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:22 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:23 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:23 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:24 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:24 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:24 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:25 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:25 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:26 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:26 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:26 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:27 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:27 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:28 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:28 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:28 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:29 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:29 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:30 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:30 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:31 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:31 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:31 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:32 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:32 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:33 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:33 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:33 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:34 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:34 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:35 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:35 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:35 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:36 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:36 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:37 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:37 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:38 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:38 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:38 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:39 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:39 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:40 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.91 - - [17/Dec/2025:22:16:40 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.91 - - [17/Dec/2025:22:16:40 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.176.91 - - [17/Dec/2025:22:16:41 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.10.41 - - [17/Dec/2025:22:37:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.230.27 - - [18/Dec/2025:06:30:13 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:13 +0100] "GET /amniotic.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:14 +0100] "GET /maghrib.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:14 +0100] "GET /byby.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:15 +0100] "GET /modules.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:15 +0100] "GET /home.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:15 +0100] "GET /guestbook.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:15 +0100] "GET /gastenboek.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:16 +0100] "GET /Guestbook.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:16 +0100] "GET /jax_guestbook.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:16 +0100] "GET /scarbook.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:17 +0100] "GET /gaestebuch.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:17 +0100] "GET /gb.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:17 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:18 +0100] "GET /adminer-4.6.3.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:18 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:18 +0100] "GET /olux.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:19 +0100] "GET /indoxploit.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:19 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:19 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:20 +0100] "GET /upload.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:20 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:20 +0100] "GET /adminer-4.6.2.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:21 +0100] "GET /adminer-4.6.1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:21 +0100] "GET /adminer-4.6.0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:21 +0100] "GET /adminer.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:22 +0100] "GET /adminer-4.5.0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:22 +0100] "GET /adminer-4.4.0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:22 +0100] "GET /adminer-4.3.1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:23 +0100] "GET /adminer-4.3.0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:23 +0100] "GET /adminer-4.2.5.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:23 +0100] "GET /adminer-4.2.4.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:24 +0100] "GET /adminer-4.2.3.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:24 +0100] "GET /adminer-4.2.2.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:24 +0100] "GET /adminer-4.2.1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:25 +0100] "GET /adminer-4.2.0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:25 +0100] "GET /adminer-4.1.0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:25 +0100] "GET /adminer-4.0.3.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:26 +0100] "GET /adminer-4.0.2.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:26 +0100] "GET /adminer-4.0.1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:26 +0100] "GET /adminer-4.0.0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:27 +0100] "GET /adminer-3.7.1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:27 +0100] "GET /adminer-3.7.0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:27 +0100] "GET /adminer-3.6.4.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:28 +0100] "GET /adminer-3.6.3.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:28 +0100] "GET /adminer-3.6.2.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:28 +0100] "GET /adminer-3.6.1.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:29 +0100] "GET /adminer-3.6.0.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:29 +0100] "GET /ad.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:29 +0100] "GET /regpage.php HTTP/1.1" 301 162 "-" "-" 162.158.230.27 - - [18/Dec/2025:06:30:30 +0100] "GET /phpnet1.php HTTP/1.1" 301 162 "-" "-" 172.71.154.44 - - [18/Dec/2025:07:20:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 104.22.18.7 - - [18/Dec/2025:07:20:57 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://www.immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 162.158.182.193 - - [18/Dec/2025:08:00:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 104.23.223.110 - - [18/Dec/2025:11:05:09 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.94.200 - - [18/Dec/2025:11:06:16 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.69.169.226 - - [18/Dec/2025:11:07:22 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:22 +0100] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:23 +0100] "GET /widgets.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:23 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:23 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:24 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:24 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:24 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:25 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:25 +0100] "GET /blurbs.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:25 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:26 +0100] "GET /axx.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:26 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:26 +0100] "GET /minik.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:27 +0100] "GET /OK.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:27 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:28 +0100] "GET /zsec.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:28 +0100] "GET /arig.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:29 +0100] "GET /admin1.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:29 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:29 +0100] "GET /af32.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:30 +0100] "GET /rz.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:30 +0100] "GET /hugo.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:30 +0100] "GET /ava.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:30 +0100] "GET /lzyrj.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:31 +0100] "GET /laudq.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:31 +0100] "GET /anjay.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:31 +0100] "GET /let.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:32 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:32 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:32 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:32 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:33 +0100] "GET /abe.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:33 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:33 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:33 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:34 +0100] "GET /cloud.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:34 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:34 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:35 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:35 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:36 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:36 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:37 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:37 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:37 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:38 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:38 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:38 +0100] "GET /uana.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:39 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:39 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:39 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:39 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:40 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [18/Dec/2025:11:07:40 +0100] "GET /ioxi-rex4.php7 HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:41 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.70.233.13 - - [18/Dec/2025:11:07:41 +0100] "GET /wp-info.php HTTP/1.1" 301 162 "-" "-" 172.70.233.13 - - [18/Dec/2025:11:07:41 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "-" 172.70.233.13 - - [18/Dec/2025:11:07:42 +0100] "GET /ws.php7 HTTP/1.1" 301 162 "-" "-" 172.70.233.13 - - [18/Dec/2025:11:07:42 +0100] "GET /rss.php HTTP/1.1" 301 162 "-" "-" 172.70.233.13 - - [18/Dec/2025:11:07:42 +0100] "GET /pekok.php HTTP/1.1" 301 162 "-" "-" 172.70.233.13 - - [18/Dec/2025:11:07:43 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.70.233.13 - - [18/Dec/2025:11:07:43 +0100] "GET /wp-aa.php HTTP/1.1" 301 162 "-" "-" 172.70.233.13 - - [18/Dec/2025:11:07:43 +0100] "GET /cart.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:43 +0100] "GET /compare.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:44 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:44 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:44 +0100] "GET /222.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:45 +0100] "GET /atom.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:45 +0100] "GET /case.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:45 +0100] "GET /docs.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:45 +0100] "GET /ios.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:46 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:46 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:46 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:47 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:47 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:47 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:48 +0100] "GET /f.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:48 +0100] "GET /max.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:48 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:49 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:49 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:49 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:50 +0100] "GET /vv.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:50 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:50 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:51 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:51 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:51 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:52 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:52 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:52 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:53 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:53 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:53 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:54 +0100] "GET /conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:54 +0100] "GET /xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:55 +0100] "GET /asas.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:55 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:55 +0100] "GET /about.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:56 +0100] "GET /akcc.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:56 +0100] "GET /zxl.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:57 +0100] "GET /r.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:57 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:57 +0100] "GET /js.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:58 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:58 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:58 +0100] "GET /123.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:59 +0100] "GET /321.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:59 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:59 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:07:59 +0100] "GET /al.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:00 +0100] "GET /xx.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:00 +0100] "GET /jga.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:00 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:00 +0100] "GET /ty.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:01 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:01 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:01 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:02 +0100] "GET /xo.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:02 +0100] "GET /dlu.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:02 +0100] "GET /rk2.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:03 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:03 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:04 +0100] "GET /karak.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:04 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:04 +0100] "GET /406.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:05 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:05 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:05 +0100] "GET /cache.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:06 +0100] "GET /zfile.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:06 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:06 +0100] "GET /des.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:07 +0100] "GET /ant.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:07 +0100] "GET /jlex.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:07 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:07 +0100] "GET /fm.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:08 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:08 +0100] "GET /wpc.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:08 +0100] "GET /lc.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:09 +0100] "GET /mlex.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:09 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:09 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:10 +0100] "GET /mpvloi.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:10 +0100] "GET /v1.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:11 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:11 +0100] "GET /dex.php HTTP/1.1" 301 162 "-" "-" 172.70.233.54 - - [18/Dec/2025:11:08:11 +0100] "GET /angelV2.php HTTP/1.1" 301 162 "-" "-" 172.70.94.173 - - [18/Dec/2025:14:14:03 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.94.125 - - [18/Dec/2025:14:14:03 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.110.131 - - [18/Dec/2025:15:02:53 +0100] "GET /.tmb/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:54 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:54 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:54 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:55 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:55 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:55 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:56 +0100] "GET //wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:56 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:56 +0100] "GET /worksec.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:57 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:57 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:57 +0100] "GET /ultra.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:58 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:58 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:58 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:59 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:59 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:02:59 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:00 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:00 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:00 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:01 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:01 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:01 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:02 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:02 +0100] "GET /admin.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:02 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:03 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:03 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:03 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:04 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:04 +0100] "GET /adminfuns.php?attempt=1 HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:04 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:05 +0100] "GET /alf.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:05 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:05 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:06 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:06 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:06 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:07 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:07 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:07 +0100] "GET /assets/images/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:08 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:08 +0100] "GET /async-upload.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:08 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:09 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:09 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:09 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:10 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:10 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:10 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:11 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:11 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:12 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:12 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:12 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:13 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:13 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:13 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:14 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:14 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:14 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:15 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:15 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:15 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:16 +0100] "GET /fx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:16 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:16 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:17 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:17 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:17 +0100] "GET /help.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:18 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:18 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:18 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:19 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:19 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:19 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:20 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:20 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:20 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:21 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:21 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:21 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:22 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:22 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:22 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:23 +0100] "GET /termps.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [18/Dec/2025:15:03:23 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 172.70.42.178 - - [18/Dec/2025:16:40:15 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.186.250 - - [18/Dec/2025:17:13:42 +0100] "GET /.well-known/acme-challenge/zAtfyNvIU5NhDEP7tDNDmNLXNnWc8EY9lnWdSSjimJI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.68.175.32 - - [18/Dec/2025:17:13:42 +0100] "GET /.well-known/acme-challenge/zAtfyNvIU5NhDEP7tDNDmNLXNnWc8EY9lnWdSSjimJI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.71.254.16 - - [18/Dec/2025:17:13:42 +0100] "GET /.well-known/acme-challenge/zAtfyNvIU5NhDEP7tDNDmNLXNnWc8EY9lnWdSSjimJI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.217.47 - - [18/Dec/2025:17:13:42 +0100] "GET /.well-known/acme-challenge/zAtfyNvIU5NhDEP7tDNDmNLXNnWc8EY9lnWdSSjimJI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.71.124.48 - - [18/Dec/2025:17:13:46 +0100] "GET /.well-known/acme-challenge/zAtfyNvIU5NhDEP7tDNDmNLXNnWc8EY9lnWdSSjimJI HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.70.214.79 - - [18/Dec/2025:17:13:48 +0100] "GET /.well-known/acme-challenge/R5RXEY8RMTzQHLir-QL7E5arFUXCvkCgT2e_jJ_i1ns HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.160.96 - - [18/Dec/2025:17:13:49 +0100] "GET /.well-known/acme-challenge/R5RXEY8RMTzQHLir-QL7E5arFUXCvkCgT2e_jJ_i1ns HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.69.7.26 - - [18/Dec/2025:17:13:49 +0100] "GET /.well-known/acme-challenge/R5RXEY8RMTzQHLir-QL7E5arFUXCvkCgT2e_jJ_i1ns HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.221.108 - - [18/Dec/2025:17:13:49 +0100] "GET /.well-known/acme-challenge/R5RXEY8RMTzQHLir-QL7E5arFUXCvkCgT2e_jJ_i1ns HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.70.208.8 - - [18/Dec/2025:17:13:50 +0100] "GET /.well-known/acme-challenge/R5RXEY8RMTzQHLir-QL7E5arFUXCvkCgT2e_jJ_i1ns HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.71.198.149 - - [18/Dec/2025:17:46:11 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:13 +0100] "GET /.well-known/worksec.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:20 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:21 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:21 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:22 +0100] "GET /wp-set.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:23 +0100] "GET /ah22.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:23 +0100] "GET /styll.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:24 +0100] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:24 +0100] "GET /wfile.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:25 +0100] "GET /wp-includes/assets/zxl.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:26 +0100] "GET /css/sf9.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:27 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:27 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:28 +0100] "GET /pu.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:29 +0100] "GET /sfcl.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:29 +0100] "GET /npcs7k.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:30 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:31 +0100] "GET /cro.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:31 +0100] "GET /egu.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:32 +0100] "GET /doo.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:33 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:33 +0100] "GET /wakak.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:34 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:35 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:36 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:36 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:37 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:38 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:38 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:39 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:40 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:40 +0100] "GET /aves.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:41 +0100] "GET /images/chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:42 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:43 +0100] "GET /manage.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:43 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:44 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:44 +0100] "GET /first.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:45 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:46 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:46 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:47 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:48 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:48 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:49 +0100] "GET /mh.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:50 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:50 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:51 +0100] "GET /usep.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:52 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:52 +0100] "GET /asd67.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:53 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:54 +0100] "GET /rss.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:54 +0100] "GET /wpls.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:55 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:56 +0100] "GET /zeal.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:57 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:57 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:58 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:46:59 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:00 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:01 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:01 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:02 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:03 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:04 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:04 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:05 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:06 +0100] "GET /wp-content/json.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:06 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:07 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:08 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:08 +0100] "GET /loads.PhP HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:09 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:10 +0100] "GET /wp-admin/update.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:10 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:11 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:12 +0100] "GET /2r.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:12 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:13 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:13 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:14 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:14 +0100] "GET /wsvvs.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:15 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:16 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:17 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:18 +0100] "GET /666.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:18 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:19 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:20 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:20 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:21 +0100] "GET /qlex1.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:21 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:22 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:23 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:24 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:24 +0100] "GET /wp-includes/mah.php HTTP/1.1" 301 162 "-" "-" 172.71.198.149 - - [18/Dec/2025:17:47:25 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 104.22.1.198 - - [18/Dec/2025:18:01:07 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 104.22.24.97 - - [18/Dec/2025:18:01:07 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 104.22.24.142 - - [18/Dec/2025:18:20:37 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 104.23.245.177 - - [18/Dec/2025:18:20:37 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.70.188.17 - - [18/Dec/2025:19:03:00 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.101 - - [18/Dec/2025:19:03:01 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.189.101 - - [18/Dec/2025:19:03:01 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.101 - - [18/Dec/2025:19:03:01 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.189.101 - - [18/Dec/2025:19:03:02 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.101 - - [18/Dec/2025:19:03:02 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.189.101 - - [18/Dec/2025:19:03:03 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.101 - - [18/Dec/2025:19:03:03 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.189.101 - - [18/Dec/2025:19:03:03 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.189.101 - - [18/Dec/2025:19:03:04 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:05 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:05 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:06 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:06 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:06 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:07 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:07 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:08 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:08 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:09 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:09 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:10 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:10 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:10 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:11 +0100] "GET /k.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:11 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:12 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:12 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:12 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:13 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.188.17 - - [18/Dec/2025:19:03:13 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:14 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:14 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:15 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:15 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:16 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:16 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:16 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:17 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:17 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:18 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:18 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:18 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:19 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:19 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:20 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:20 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:21 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:21 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:21 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:22 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:22 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.188.17 - - [18/Dec/2025:19:03:23 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:23 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:24 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:24 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:24 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:25 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:25 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:26 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:26 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:26 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:27 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:27 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:28 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:28 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:29 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:29 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:29 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.188.17 - - [18/Dec/2025:19:03:30 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.188.17 - - [18/Dec/2025:19:03:30 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.188.17 - - [18/Dec/2025:19:03:31 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.38.207 - - [18/Dec/2025:19:04:35 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [18/Dec/2025:19:04:36 +0100] "GET /neshe HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [18/Dec/2025:19:04:36 +0100] "GET /goomaogm.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [18/Dec/2025:19:04:37 +0100] "GET /webix.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [18/Dec/2025:19:04:37 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 162.158.230.103 - - [18/Dec/2025:19:04:37 +0100] "GET /xy.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:38 +0100] "GET /acp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:38 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:38 +0100] "GET /file21.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:39 +0100] "GET /0xx.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:39 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:39 +0100] "GET /file15.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:40 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:40 +0100] "GET /max.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:40 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:41 +0100] "GET /mpxct.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:41 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:41 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:42 +0100] "GET /blox.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:42 +0100] "GET /class-.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:42 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:43 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:43 +0100] "GET /hly.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:43 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:44 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:44 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:44 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:45 +0100] "GET /thoms.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:45 +0100] "GET /d12.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:45 +0100] "GET /tajj.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:46 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:46 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:46 +0100] "GET /neshe HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:47 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:47 +0100] "GET /wfile.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:47 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:48 +0100] "GET /plss3.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:48 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:48 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:49 +0100] "GET /x0x.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:49 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:49 +0100] "GET /33-sajt-mozhet-ugrozhat HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:50 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:50 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:50 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:51 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:51 +0100] "GET /xsas.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:51 +0100] "GET /efile.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:52 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:52 +0100] "GET /vee.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:52 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:53 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:53 +0100] "GET /lopst.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:53 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:54 +0100] "GET /fileas.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:54 +0100] "GET /usep.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:54 +0100] "GET /file30.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:55 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:55 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:55 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:56 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:56 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:56 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:57 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:57 +0100] "GET /size.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:57 +0100] "GET /admin.phphttps://narbonic.com/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:58 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:58 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:58 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:59 +0100] "GET /alexantr/filemanager HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:59 +0100] "GET /33.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:04:59 +0100] "GET /abcd.phphttp://unidadmedicalasvegas.com/xsas.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:00 +0100] "GET /sf.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:00 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:00 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:01 +0100] "GET /ant.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:01 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:01 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:02 +0100] "GET /neshe.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:02 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:02 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:03 +0100] "GET /admin.phphttps://ronstaxidermy.biz/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [18/Dec/2025:19:05:03 +0100] "GET /login HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [18/Dec/2025:20:21:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.184.47 - - [18/Dec/2025:22:26:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.246.101 - - [18/Dec/2025:22:35:11 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.68.10.41 - - [18/Dec/2025:22:37:25 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.70.100.213 - - [19/Dec/2025:01:47:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 172.71.110.130 - - [19/Dec/2025:01:49:10 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [19/Dec/2025:01:49:11 +0100] "GET /shoha.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [19/Dec/2025:01:49:12 +0100] "GET /raw.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [19/Dec/2025:01:49:13 +0100] "GET /an7.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [19/Dec/2025:01:49:13 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [19/Dec/2025:01:49:13 +0100] "GET /n.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:14 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:15 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:15 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:15 +0100] "GET /admir.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:16 +0100] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:16 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:16 +0100] "GET /wp-admin/admin-post.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:17 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:17 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:17 +0100] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:18 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:18 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:19 +0100] "GET /123.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:19 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:19 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:20 +0100] "GET /wp-admin/css/colour.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:20 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:20 +0100] "GET /wp-x7.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:21 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:21 +0100] "GET /v3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:21 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:22 +0100] "GET /system.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:22 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:22 +0100] "GET /555.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:23 +0100] "GET /AxAo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:23 +0100] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:23 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:24 +0100] "GET /nc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:24 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:25 +0100] "GET /file32.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:25 +0100] "GET /hook.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:25 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:26 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:26 +0100] "GET /sto.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:26 +0100] "GET /ffile.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:27 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:27 +0100] "GET /wp1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:28 +0100] "GET /css/up.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:28 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:28 +0100] "GET /666.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:29 +0100] "GET /wb.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:29 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:30 +0100] "GET /fs.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:30 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:30 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:31 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:31 +0100] "GET /indo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:31 +0100] "GET /card.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:32 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:32 +0100] "GET /mnkalo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:32 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:33 +0100] "GET /file3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:33 +0100] "GET /031.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:33 +0100] "GET /mws.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:34 +0100] "GET /dlu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:34 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:35 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:35 +0100] "GET /wp-the1me.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:35 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:36 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:36 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:37 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:37 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:37 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:38 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:38 +0100] "GET /hk.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:39 +0100] "GET /yas.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:39 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:39 +0100] "GET /wp-gr.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:40 +0100] "GET /owl.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:40 +0100] "GET /mo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:40 +0100] "GET /file21.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:41 +0100] "GET /ok.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:41 +0100] "GET /444.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:42 +0100] "GET /zc-903.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:42 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:42 +0100] "GET /nij.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:43 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:43 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:44 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:44 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:45 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:45 +0100] "GET /lo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:46 +0100] "GET /wpls.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:46 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:46 +0100] "GET /inde.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:47 +0100] "GET /777.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:47 +0100] "GET /luxe.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:48 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:48 +0100] "GET /zxin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:48 +0100] "GET /xtt.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:49 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:49 +0100] "GET /noe.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:49 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:50 +0100] "GET /shellalfa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:50 +0100] "GET /te.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:51 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:51 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:52 +0100] "GET /cccc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:52 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:52 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:53 +0100] "GET /v4.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:53 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:54 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:54 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:54 +0100] "GET /gelap.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:55 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:55 +0100] "GET /000.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:55 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:56 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:56 +0100] "GET /file18.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:57 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:57 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:57 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:58 +0100] "GET /acp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:58 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:58 +0100] "GET /static/as.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:59 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:59 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:49:59 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:00 +0100] "GET /33.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:00 +0100] "GET /o.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:01 +0100] "GET /wcas.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:01 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:01 +0100] "GET /f6.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:02 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:03 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:03 +0100] "GET /lol.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:03 +0100] "GET /fileas.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:04 +0100] "GET /n3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:04 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:05 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:05 +0100] "GET /wolv2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:06 +0100] "GET /wp-is.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:06 +0100] "GET /ava.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:06 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:07 +0100] "GET /shell1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:07 +0100] "GET /gdn.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:08 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:08 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:09 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:09 +0100] "GET /asd67.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:09 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:10 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:11 +0100] "GET /usep.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:11 +0100] "GET /auth.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:11 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:12 +0100] "GET /hello.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:12 +0100] "GET /abt.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:12 +0100] "GET /jmfi2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:13 +0100] "GET /layout.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:13 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:14 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:14 +0100] "GET /nope.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:14 +0100] "GET /js.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:15 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:15 +0100] "GET /media.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:15 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:16 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:16 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:17 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:17 +0100] "GET /sko.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:18 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:18 +0100] "GET /wp-mail.php/wp-includes/ID3/rnEPv9.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:18 +0100] "GET /png.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:19 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:19 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:20 +0100] "GET /about3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:20 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:20 +0100] "GET /r4f_1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:21 +0100] "GET /ftp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:21 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:21 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:22 +0100] "GET /himu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:22 +0100] "GET /wfile.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:23 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:23 +0100] "GET /miansha.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:23 +0100] "GET /test2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:24 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:24 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:25 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:25 +0100] "GET /asas.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:26 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:26 +0100] "GET /mans.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:26 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:27 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:27 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:28 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:28 +0100] "GET /class-wp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:28 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:29 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:29 +0100] "GET /ioxi-o2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:29 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:30 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:30 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:31 +0100] "GET /ol.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:31 +0100] "GET /ouh.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:31 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:32 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:32 +0100] "GET /tgrs.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:32 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:33 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:33 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:34 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [19/Dec/2025:01:50:34 +0100] "GET /zxz.php HTTP/1.1" 301 162 "-" "-" 172.69.17.39 - - [19/Dec/2025:01:56:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/123.0.0.0 Chrome/123.0.0.0 Safari/537.36" 172.69.58.105 - - [19/Dec/2025:01:56:09 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Mobile Safari/537.36" 172.70.100.214 - - [19/Dec/2025:02:16:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/123.0.0.0 Chrome/123.0.0.0 Safari/537.36" 172.70.100.214 - - [19/Dec/2025:02:16:20 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Mobile Safari/537.36" 172.71.232.80 - - [19/Dec/2025:03:29:21 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.229.135 - - [19/Dec/2025:03:29:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.68.164.37 - - [19/Dec/2025:03:43:35 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 108.162.226.191 - - [19/Dec/2025:03:43:37 +0100] "GET /admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 172.69.94.22 - - [19/Dec/2025:04:36:20 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.95.132 - - [19/Dec/2025:04:36:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.95.132 - - [19/Dec/2025:04:36:22 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.95.132 - - [19/Dec/2025:04:36:23 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:24 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:24 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:25 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:25 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:26 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:26 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:27 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:27 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:28 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:29 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:29 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:30 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:30 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:31 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:32 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:32 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:33 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:34 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:34 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:35 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:35 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:36 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:36 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:37 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:37 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:38 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:39 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:39 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:40 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:40 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:41 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:41 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:42 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.22 - - [19/Dec/2025:04:36:42 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:43 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:44 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:44 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:45 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:45 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:46 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:46 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:47 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:47 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:48 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:48 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:49 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:50 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:50 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:51 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:51 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:52 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:52 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:53 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:54 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:54 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:55 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:55 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:56 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:56 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:57 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:57 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:58 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:36:58 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:36:59 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:37:00 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.22 - - [19/Dec/2025:04:37:00 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.22 - - [19/Dec/2025:04:37:01 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.103.83 - - [19/Dec/2025:08:52:04 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.91 Safari/537.36 OPR/27.0.1689.54 (Edition FCR)" 172.64.198.228 - - [19/Dec/2025:08:52:04 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X) AppleWebKit/537.51.2 (KHTML, like Gecko) Mobile/11D257" 172.68.159.176 - - [19/Dec/2025:08:52:05 +0100] "GET /.env HTTP/1.1" 301 162 "-" "More Opera 9.51 user agents strings -->>" 172.64.200.182 - - [19/Dec/2025:08:52:05 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.52" 162.158.182.192 - - [19/Dec/2025:08:52:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36" 104.23.217.47 - - [19/Dec/2025:08:52:06 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Opera/8.53 (Windows NT 5.1; U; pt)" 104.23.223.132 - - [19/Dec/2025:08:52:06 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 6.0.1; Mobile; rv:46.0) Gecko/46.0 Firefox/46.0" 172.68.159.176 - - [19/Dec/2025:08:52:06 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.110 Safari/537.36" 172.68.183.71 - - [19/Dec/2025:08:52:06 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "User-Agent:Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 172.68.183.71 - - [19/Dec/2025:08:52:06 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.51 [en]" 172.64.198.228 - - [19/Dec/2025:08:52:07 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; chromeframe/2.4.8.5746) AppleWebKit/1.0 (KHTML, like Gecko) Bromium Safari/1.0" 172.70.143.186 - - [19/Dec/2025:08:58:41 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 104.23.175.8 - - [19/Dec/2025:12:30:14 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 104.23.175.8 - - [19/Dec/2025:12:30:15 +0100] "GET /admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 162.158.154.139 - - [19/Dec/2025:14:04:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.159.119.63 - - [19/Dec/2025:14:04:10 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.233.55 - - [19/Dec/2025:14:33:53 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.68.210.166 - - [19/Dec/2025:15:55:24 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.157 - - [19/Dec/2025:15:55:25 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.157 - - [19/Dec/2025:15:55:26 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.157 - - [19/Dec/2025:15:55:26 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.157 - - [19/Dec/2025:15:55:26 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.157 - - [19/Dec/2025:15:55:27 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.157 - - [19/Dec/2025:15:55:27 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.157 - - [19/Dec/2025:15:55:27 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.157 - - [19/Dec/2025:15:55:28 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.157 - - [19/Dec/2025:15:55:28 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.157 - - [19/Dec/2025:15:55:28 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:29 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:29 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.166 - - [19/Dec/2025:15:55:29 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:30 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:30 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:30 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:31 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:31 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:32 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:32 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:32 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:33 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:33 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:33 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:34 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:34 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:34 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:35 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:35 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:35 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:36 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:36 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:36 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:37 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:37 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:37 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:38 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:38 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:38 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:39 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:39 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:39 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:40 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:40 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:41 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:41 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:42 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:42 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:42 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:43 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:43 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:43 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:44 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:44 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:44 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.166 - - [19/Dec/2025:15:55:45 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:45 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:45 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:46 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:46 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:46 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:47 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.166 - - [19/Dec/2025:15:55:47 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:47 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:48 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:48 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:48 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:49 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.166 - - [19/Dec/2025:15:55:49 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.166 - - [19/Dec/2025:15:55:49 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.221.111 - - [19/Dec/2025:16:51:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 162.158.170.251 - - [19/Dec/2025:18:52:50 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.68.36.155 - - [19/Dec/2025:19:29:22 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:22 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:23 +0100] "GET /wp-content/themes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:23 +0100] "GET /wp-admin/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:23 +0100] "GET /wp-includes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:24 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:24 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:24 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:24 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:24 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:25 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:25 +0100] "GET /blurbs.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:25 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:25 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:25 +0100] "GET /shelp.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:25 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:25 +0100] "GET /dex.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:26 +0100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:26 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:26 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:26 +0100] "GET /wp-admin/zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:26 +0100] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:26 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:27 +0100] "GET /shlo.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:27 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:27 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:27 +0100] "GET /php8.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:27 +0100] "GET /lufix1.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:27 +0100] "GET /witmm.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:27 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:28 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:28 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:28 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:28 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:28 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:28 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:29 +0100] "GET /txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:29 +0100] "GET /wp-content/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:29 +0100] "GET /wp-admin/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:29 +0100] "GET /postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:29 +0100] "GET /wp-content/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [19/Dec/2025:19:29:29 +0100] "GET /wp-admin/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.182.192 - - [19/Dec/2025:19:31:48 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.182.193 - - [19/Dec/2025:19:33:17 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.232.81 - - [19/Dec/2025:19:36:02 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 141.101.68.235 - - [19/Dec/2025:19:36:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.42.163 - - [19/Dec/2025:19:37:32 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 162.158.152.182 - - [19/Dec/2025:19:37:33 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 162.158.152.182 - - [19/Dec/2025:19:37:33 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 162.158.152.182 - - [19/Dec/2025:19:37:33 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 162.158.152.182 - - [19/Dec/2025:19:37:34 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 162.158.152.182 - - [19/Dec/2025:19:37:34 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 162.158.152.182 - - [19/Dec/2025:19:37:34 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 162.159.120.250 - - [19/Dec/2025:19:48:29 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 108.162.246.115 - - [19/Dec/2025:19:48:29 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.243.27 - - [19/Dec/2025:19:58:37 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.69.151.199 - - [19/Dec/2025:22:14:31 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Apache-HttpClient/4.5.14 (Java/11.0.17)" 172.68.10.40 - - [19/Dec/2025:22:40:04 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.221.108 - - [19/Dec/2025:23:12:05 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; HPNTDF; BRI/1; BRI/2; FunWebProducts; .NET4.0C)" 104.23.221.110 - - [19/Dec/2025:23:12:05 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36 OPR/41.0.2353.69" 172.64.200.98 - - [19/Dec/2025:23:12:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 172.68.183.72 - - [19/Dec/2025:23:12:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; Touch; ASU2JS; rv:11.0) like Gecko" 172.64.200.98 - - [19/Dec/2025:23:12:06 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_5; en-us) AppleWebKit/525.18.1 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1" 162.158.172.95 - - [19/Dec/2025:23:12:07 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/530.7 (KHTML, like Gecko) Chrome/2.0.177.0 Safari/530.7" 172.64.200.98 - - [19/Dec/2025:23:12:07 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 2.3.4; en-us; LGL75C Build/GRJ22) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 104.23.223.133 - - [19/Dec/2025:23:12:08 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 2.3.6; es-us; GT-S5570L Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 172.64.198.228 - - [19/Dec/2025:23:12:08 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (Mozilla/4.0; MSIE 7.0; Windows NT 5.1; FDM; SV1; .NET CLR 3.0.04506.30)" 162.158.103.4 - - [19/Dec/2025:23:12:08 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 162.158.103.4 - - [19/Dec/2025:23:12:09 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.366.2 Safari/533.4" 162.158.182.192 - - [19/Dec/2025:23:12:09 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 104.23.221.108 - - [19/Dec/2025:23:12:10 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (ipad Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.6 (KHTML, like Gecko) Chrome/7.0.498.0 Safari/534.6" 162.158.182.192 - - [19/Dec/2025:23:12:10 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_2_5 like Mac OS X) AppleWebKit/604.5.2 (KHTML, like Gecko) Version/11.0 Mobile/15D5046b Safari/604.1" 172.68.159.175 - - [19/Dec/2025:23:12:12 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; ja-JP) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" 172.64.200.182 - - [19/Dec/2025:23:12:12 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.2.2; he-il; GT-S7580L Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 104.23.223.111 - - [19/Dec/2025:23:12:12 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1b3) Gecko/20090327 Fedora/3.1-0.11.beta3.fc11 Firefox/3.1b3" 162.158.103.84 - - [19/Dec/2025:23:12:14 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-us) AppleWebKit/523.10.3 (KHTML, like Gecko) Version/3.0.4 Safari/523.10" 104.23.221.110 - - [19/Dec/2025:23:12:14 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.6) Gecko/2009012700 SUSE/3.0.6-0.1 Firefox/3.0.6" 104.23.221.108 - - [19/Dec/2025:23:12:14 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.8.0.6) Gecko/20060808 Fedora/1.5.0.6-2.fc5 Firefox/1.5.0.6" 162.158.103.4 - - [19/Dec/2025:23:12:14 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.5 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.4" 104.23.223.133 - - [19/Dec/2025:23:12:15 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.3) Gecko/20060523 Ubuntu/dapper Firefox/1.5.0.3" 104.23.217.47 - - [19/Dec/2025:23:12:15 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G930A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36" 172.64.200.182 - - [19/Dec/2025:23:12:16 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; .NET CLR 1.1.4322)" 104.23.217.47 - - [19/Dec/2025:23:12:16 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 162.158.103.4 - - [19/Dec/2025:23:12:17 +0100] "GET /web/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 2.3.6; en-us; SCH-I405 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 104.23.221.110 - - [19/Dec/2025:23:12:18 +0100] "GET /.env.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.0.4; ST21i Build/11.0.A.4.22) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.58 Mobile Safari/537.31 OPR/14.0.1074.58201" 162.158.182.192 - - [19/Dec/2025:23:12:18 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.53" 104.23.217.152 - - [19/Dec/2025:23:12:19 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Opera/9.80 (Linux mips; ) Presto/2.12.407 Version/12.51 MB97/0.0.39.18 (LUXOR, Mxl661L32, wireless) VSTVB_MB97 SmartTvA/3.0.0" 162.158.182.192 - - [19/Dec/2025:23:12:19 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.10) Gecko/20061201 Firefox/2.0.0.10 (Ubuntu-feisty)" 162.158.103.84 - - [19/Dec/2025:23:12:19 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 5.1.1; Mobile; rv:52.0) Gecko/52.0 Firefox/52.0" 162.158.103.4 - - [19/Dec/2025:23:12:20 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.89 Safari/537.36 OPR/49.0.2725.47" 162.158.172.95 - - [19/Dec/2025:23:12:20 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36" 162.158.103.4 - - [19/Dec/2025:23:12:21 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.0.4; KFJWI Build/IMM76D) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.102 Safari/537.36 OPR/25.0.1619.84037" 162.158.103.84 - - [19/Dec/2025:23:12:22 +0100] "GET /web/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:44.0) Gecko/20100101 Firefox/44.0" 104.23.223.111 - - [19/Dec/2025:23:12:22 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; U; ru; CPU iPhone OS 4_2_1 like Mac OS X; ru) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8C148a Safari/6533.18.5" 104.23.221.108 - - [19/Dec/2025:23:12:23 +0100] "GET /.env.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-us; HTC_0PCV220/1.11.506.1 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 172.68.159.175 - - [19/Dec/2025:23:12:23 +0100] "GET /images/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 172.64.200.182 - - [19/Dec/2025:23:12:24 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows 98) Opera 6.01 [en]" 104.23.221.110 - - [19/Dec/2025:23:12:25 +0100] "GET /.env.save.1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SAMSUNG SM-G530T1 Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.3 Chrome/38.0.2125.102 Mobile Safari/537.36" 104.23.217.152 - - [19/Dec/2025:23:12:25 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G610F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.109 Mobile Safari/537.36" 162.158.103.4 - - [19/Dec/2025:23:12:25 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 5.2; WOW64) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.63 Safari/535.7" 104.23.217.152 - - [19/Dec/2025:23:12:26 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0" 104.23.217.152 - - [19/Dec/2025:23:12:26 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_0) AppleWebKit/601.6.17 (KHTML, like Gecko) Version/9.1.1 Safari/601.6.17" 162.158.103.4 - - [19/Dec/2025:23:12:27 +0100] "GET /API/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 1.5; de-ch; HTC Hero Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1" 162.158.172.95 - - [19/Dec/2025:23:12:27 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.125 Safari/537.36 OPR/30.0.1835.88 (Edition Campaign 49)" 104.23.221.108 - - [19/Dec/2025:23:12:28 +0100] "GET /images/.env HTTP/1.1" 301 162 "-" "Opera/8.02 (Windows NT 5.1; U; de)" 104.23.223.111 - - [19/Dec/2025:23:12:28 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" 104.23.217.152 - - [19/Dec/2025:23:12:28 +0100] "GET /.env.save.1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-N950U Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Mobile Safari/537.36" 104.23.221.110 - - [19/Dec/2025:23:12:29 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 172.64.198.228 - - [19/Dec/2025:23:12:29 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.3; en-us; KFAPWI Build/KTU84M) AppleWebKit/537.36 (KHTML, like Gecko) Silk/3.68 like Chrome/39.0.2171.93 Safari/537.36" 104.23.223.133 - - [19/Dec/2025:23:12:29 +0100] "GET /API/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36" 162.158.172.95 - - [19/Dec/2025:23:12:30 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 5.1; Mobile; rv:44.0) Gecko/44.0 Firefox/44.0" 162.158.172.95 - - [19/Dec/2025:23:12:31 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25" 172.69.169.227 - - [19/Dec/2025:23:48:15 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:16 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:16 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:16 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:17 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:17 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:17 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:17 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:18 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:18 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:18 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:18 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:19 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:19 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:19 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:19 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:20 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:20 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:20 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:20 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [19/Dec/2025:23:48:21 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:21 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:21 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:21 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:22 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:22 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:22 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:22 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:23 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:23 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:23 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:24 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [19/Dec/2025:23:48:24 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:24 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:24 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:25 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:25 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:25 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:25 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:26 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:26 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:26 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:26 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:27 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:27 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:27 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:27 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:28 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:28 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:28 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:28 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:29 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:29 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:29 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:29 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:30 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:30 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:30 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:30 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:31 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:31 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [19/Dec/2025:23:48:31 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:31 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:32 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:32 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:32 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:32 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:33 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:33 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [19/Dec/2025:23:48:33 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [19/Dec/2025:23:48:33 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [19/Dec/2025:23:48:34 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.17.38 - - [20/Dec/2025:00:55:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.70.131.170 - - [20/Dec/2025:02:20:13 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Mobile Safari/537.36" 172.69.58.105 - - [20/Dec/2025:02:22:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/123.0.0.0 Chrome/123.0.0.0 Safari/537.36" 172.69.58.105 - - [20/Dec/2025:02:22:14 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 162.158.42.76 - - [20/Dec/2025:02:22:20 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.42.143 - - [20/Dec/2025:02:25:08 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.69.214.170 - - [20/Dec/2025:03:28:18 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.69.214.170 - - [20/Dec/2025:03:28:19 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.69.214.170 - - [20/Dec/2025:03:28:19 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.69.214.170 - - [20/Dec/2025:03:28:19 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.69.214.170 - - [20/Dec/2025:03:28:19 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.69.214.130 - - [20/Dec/2025:03:28:20 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.69.214.130 - - [20/Dec/2025:03:28:20 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.70.131.169 - - [20/Dec/2025:03:54:05 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [20/Dec/2025:04:38:54 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:38:55 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:55 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:55 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:56 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:56 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [20/Dec/2025:04:38:56 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:57 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:57 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:57 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:38:57 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:58 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:58 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:38:58 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:38:58 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:38:59 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:59 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:38:59 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:38:59 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:00 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:00 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:00 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:00 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:01 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:01 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:01 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:02 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:02 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:02 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:02 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:03 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:03 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:03 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:03 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:04 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:04 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [20/Dec/2025:04:39:04 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:04 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:05 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:05 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:05 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:05 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:06 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:06 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:06 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:07 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:07 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:07 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:07 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:08 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:08 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:08 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:08 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:09 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:09 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:09 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:09 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:10 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:10 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:10 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:10 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:11 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:11 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:11 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:12 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:12 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:12 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:12 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:13 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [20/Dec/2025:04:39:13 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:13 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:13 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:14 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [20/Dec/2025:04:39:14 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:14 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:14 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:15 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:15 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:15 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:15 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:16 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:16 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:16 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:16 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:17 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:17 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:17 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:17 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:18 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:18 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:18 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:19 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:19 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:19 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:19 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:20 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:20 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:20 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:20 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:21 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:21 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [20/Dec/2025:04:39:21 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:21 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:22 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:22 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:22 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:22 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:23 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:23 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:23 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:23 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:24 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [20/Dec/2025:04:39:24 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:24 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [20/Dec/2025:04:39:25 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.200.99 - - [20/Dec/2025:04:39:56 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:30 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.59 - - [20/Dec/2025:05:50:31 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.59 - - [20/Dec/2025:05:50:32 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.59 - - [20/Dec/2025:05:50:32 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.59 - - [20/Dec/2025:05:50:32 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.59 - - [20/Dec/2025:05:50:33 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.59 - - [20/Dec/2025:05:50:33 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.59 - - [20/Dec/2025:05:50:33 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.59 - - [20/Dec/2025:05:50:34 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.59 - - [20/Dec/2025:05:50:34 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.59 - - [20/Dec/2025:05:50:34 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.59 - - [20/Dec/2025:05:50:35 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.59 - - [20/Dec/2025:05:50:35 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:35 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:36 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:36 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [20/Dec/2025:05:50:36 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:37 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:37 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:37 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:38 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:38 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:38 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:39 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:39 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:39 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:40 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:40 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:41 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:41 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:41 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:41 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:42 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [20/Dec/2025:05:50:42 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:43 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:43 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:43 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:44 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:44 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:44 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:45 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:45 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:45 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:46 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:46 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:46 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:47 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:47 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:47 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:48 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:48 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:48 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [20/Dec/2025:05:50:49 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:49 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:49 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:50 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [20/Dec/2025:05:50:50 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:50 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:51 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:51 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:51 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:52 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:52 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:52 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:53 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [20/Dec/2025:05:50:53 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:53 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:54 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:54 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:54 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [20/Dec/2025:05:50:55 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [20/Dec/2025:05:50:55 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.159.175 - - [20/Dec/2025:09:02:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.70.47.29 - - [20/Dec/2025:10:29:09 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.69.169.226 - - [20/Dec/2025:12:04:01 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:02 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:02 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:02 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:03 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:03 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:03 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:03 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:04 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:04 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:04 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:04 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:05 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:05 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:05 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:05 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:06 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:06 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:06 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:06 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:07 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:07 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:07 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:08 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:08 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:08 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [20/Dec/2025:12:04:08 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:09 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:09 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:09 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:09 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:10 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:10 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:10 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:10 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [20/Dec/2025:12:04:11 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:11 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:11 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:11 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:12 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:12 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [20/Dec/2025:12:04:12 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:12 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:13 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:13 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:13 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:13 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:14 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:14 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:14 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:14 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:15 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:15 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:15 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:15 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:16 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:16 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:16 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:16 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:17 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:17 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:17 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:18 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:18 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:18 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:18 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:19 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:19 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [20/Dec/2025:12:04:19 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:19 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:20 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [20/Dec/2025:12:04:20 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.247.96 - - [20/Dec/2025:13:02:25 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.164.111 - - [20/Dec/2025:13:03:50 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.70.94.173 - - [20/Dec/2025:17:59:13 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.148.123 - - [20/Dec/2025:21:06:58 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.111.90 - - [20/Dec/2025:21:07:19 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.69.50.158 - - [20/Dec/2025:22:40:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.24.175 - - [21/Dec/2025:00:09:09 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.169 - - [21/Dec/2025:00:09:11 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.169 - - [21/Dec/2025:00:09:11 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.169 - - [21/Dec/2025:00:09:12 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.169 - - [21/Dec/2025:00:09:12 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.169 - - [21/Dec/2025:00:09:12 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.169 - - [21/Dec/2025:00:09:12 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.169 - - [21/Dec/2025:00:09:13 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.169 - - [21/Dec/2025:00:09:13 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.169 - - [21/Dec/2025:00:09:13 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:13 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:14 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:14 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:14 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:15 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:15 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:15 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:15 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:16 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:16 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.175 - - [21/Dec/2025:00:09:16 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:16 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:17 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:17 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:17 +0100] "GET /k.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:17 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:18 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:18 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:18 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:18 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:19 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:19 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:19 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:19 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:20 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:20 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:20 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.175 - - [21/Dec/2025:00:09:20 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:21 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:21 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:21 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:21 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:22 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:22 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:22 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:22 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:23 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:23 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:23 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:24 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:24 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:24 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:24 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.175 - - [21/Dec/2025:00:09:25 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:25 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:25 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:25 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:26 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:26 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:26 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:26 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.175 - - [21/Dec/2025:00:09:27 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:27 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:27 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:27 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:28 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:28 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:28 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:28 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.175 - - [21/Dec/2025:00:09:29 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:29 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.175 - - [21/Dec/2025:00:09:29 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.221.111 - - [21/Dec/2025:01:24:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:41 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:41 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:42 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:42 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:42 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:42 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:43 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:43 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:43 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:43 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:44 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:44 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:44 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:44 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:45 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:45 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:45 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:46 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:46 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:46 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.87.34 - - [21/Dec/2025:04:25:46 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:47 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:47 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:47 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:47 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:48 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:48 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:48 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:48 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:49 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:49 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:49 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:50 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:50 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:50 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:50 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:51 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:51 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:51 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:51 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:52 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:52 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:52 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:52 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:53 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:53 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:53 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:53 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:54 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:54 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:54 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:55 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:55 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:55 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:55 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:56 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:56 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:56 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.87.34 - - [21/Dec/2025:04:25:56 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:57 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:57 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:57 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:57 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:58 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:58 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:58 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:59 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:59 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:25:59 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:25:59 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.87.34 - - [21/Dec/2025:04:26:00 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.87.34 - - [21/Dec/2025:04:26:00 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.203.149 - - [21/Dec/2025:05:06:59 +0100] "GET /contact.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.203.149 - - [21/Dec/2025:05:06:59 +0100] "GET /contact HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.92.156 - - [21/Dec/2025:06:54:26 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:27 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:28 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:28 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:29 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:29 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:29 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:30 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:30 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:31 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:31 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:32 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:32 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:33 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:33 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:33 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:34 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:34 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:35 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:35 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:35 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:36 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:36 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:37 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:37 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:37 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:38 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:38 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:39 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:40 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:40 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:40 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:41 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:41 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:42 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:42 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:42 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:43 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:43 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:44 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:44 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:44 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:45 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:45 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:45 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:46 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:46 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:47 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:47 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:47 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:48 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:48 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.92.156 - - [21/Dec/2025:06:54:48 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:49 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.92.156 - - [21/Dec/2025:06:54:49 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:50 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:50 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:50 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:51 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:51 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:52 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:52 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:52 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:53 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:53 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.92.156 - - [21/Dec/2025:06:54:54 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:54 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:54 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:55 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:55 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:55 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:56 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:56 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:57 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:57 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:57 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:58 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:58 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:59 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:54:59 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:54:59 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:00 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:00 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:01 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:01 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:01 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:02 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:02 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:03 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:03 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.92.156 - - [21/Dec/2025:06:55:03 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:04 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:04 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:05 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:05 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.92.156 - - [21/Dec/2025:06:55:06 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:06 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:06 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:07 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:07 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:08 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:08 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:08 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:09 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:09 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:10 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:10 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:10 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:11 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:11 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:12 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:12 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.92.156 - - [21/Dec/2025:06:55:12 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:13 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.92.156 - - [21/Dec/2025:06:55:13 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:24 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.222 - - [21/Dec/2025:09:19:24 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.222 - - [21/Dec/2025:09:19:25 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:25 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:26 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:26 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:26 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:27 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:27 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:28 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:28 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:28 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:29 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:29 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:29 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:29 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:30 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:30 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:31 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:31 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [21/Dec/2025:09:19:32 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:32 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:32 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:33 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [21/Dec/2025:09:19:33 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:33 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:34 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:34 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:34 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:35 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:35 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:35 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:36 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:36 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [21/Dec/2025:09:19:36 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:37 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:37 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:37 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:38 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:38 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [21/Dec/2025:09:19:38 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:39 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:39 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:39 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:40 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:40 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:40 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:41 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:41 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:41 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:42 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:42 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:42 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:43 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:43 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:43 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:44 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.153 - - [21/Dec/2025:09:19:44 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:44 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.153 - - [21/Dec/2025:09:19:45 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:45 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:45 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:46 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:46 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:46 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:47 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:47 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:47 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:48 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:48 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.153 - - [21/Dec/2025:09:19:48 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.38.206 - - [21/Dec/2025:11:01:03 +0100] "GET / HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 172.71.134.112 - - [21/Dec/2025:11:49:45 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 141.101.97.64 - - [21/Dec/2025:11:49:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.221.111 - - [21/Dec/2025:12:38:11 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.221.111 - - [21/Dec/2025:12:38:24 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.69.89.197 - - [21/Dec/2025:12:58:06 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.89.197 - - [21/Dec/2025:12:58:07 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.169.227 - - [21/Dec/2025:13:03:18 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:19 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:19 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:20 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:20 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:20 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:20 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:21 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:21 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:21 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:21 +0100] "GET /num.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:22 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:22 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:22 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:23 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:23 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:23 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:23 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:24 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:24 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:24 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:24 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:25 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:25 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:25 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:25 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:26 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:26 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:26 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:26 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:27 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:27 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:27 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:27 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:28 +0100] "GET /404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:28 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:28 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:28 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:29 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [21/Dec/2025:13:03:29 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:29 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:30 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:30 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:30 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:30 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:31 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:31 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:31 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:31 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:32 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:32 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:32 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:32 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:33 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:33 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:33 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:33 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:34 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:34 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:34 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:34 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:35 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:35 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:35 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:35 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:36 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:36 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:36 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:36 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [21/Dec/2025:13:03:37 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:37 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [21/Dec/2025:13:03:37 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.195.108 - - [21/Dec/2025:13:47:09 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.217.46 - - [21/Dec/2025:13:59:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 172.70.160.250 - - [21/Dec/2025:14:11:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.70.163.125 - - [21/Dec/2025:14:11:14 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.70.42.178 - - [21/Dec/2025:16:09:10 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.94.173 - - [21/Dec/2025:16:11:43 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.68.245.186 - - [21/Dec/2025:17:36:42 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.68.245.164 - - [21/Dec/2025:17:36:42 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 172.68.245.164 - - [21/Dec/2025:17:36:42 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.68.245.164 - - [21/Dec/2025:17:36:43 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.245.164 - - [21/Dec/2025:17:36:43 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.245.164 - - [21/Dec/2025:17:36:43 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.245.164 - - [21/Dec/2025:17:36:43 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.69.151.199 - - [21/Dec/2025:19:45:53 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.248.198 - - [21/Dec/2025:19:45:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.172.86 - - [21/Dec/2025:20:19:20 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.111.89 - - [21/Dec/2025:20:19:21 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.194.148 - - [21/Dec/2025:21:08:02 +0100] "GET /media/system/js/core.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.6.28 - - [21/Dec/2025:21:08:06 +0100] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.64.192.21 - - [21/Dec/2025:21:28:06 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.184.47 - - [21/Dec/2025:22:25:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.126.61 - - [21/Dec/2025:23:26:07 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.70.126.61 - - [21/Dec/2025:23:26:08 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.70.126.61 - - [21/Dec/2025:23:26:08 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.70.126.61 - - [21/Dec/2025:23:26:08 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.70.126.61 - - [21/Dec/2025:23:26:08 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.70.126.61 - - [21/Dec/2025:23:26:08 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.70.126.61 - - [21/Dec/2025:23:26:08 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.70.131.169 - - [21/Dec/2025:23:34:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.71.95.129 - - [22/Dec/2025:00:00:31 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.172.44 - - [22/Dec/2025:00:00:33 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:26 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:27 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:27 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:27 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:28 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:28 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:28 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:29 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:29 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:29 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:29 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:30 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:30 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:30 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:30 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:31 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:31 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:31 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [22/Dec/2025:04:36:32 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:32 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:32 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:33 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:33 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:33 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:33 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:34 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:34 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:34 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:34 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:35 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:35 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:35 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:35 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:36 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:36 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:36 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:37 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:37 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:37 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:37 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:38 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:38 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:38 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:38 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:39 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:39 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:39 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [22/Dec/2025:04:36:40 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:40 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:40 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:40 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [22/Dec/2025:04:36:41 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:41 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:41 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:41 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:42 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:42 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:42 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:42 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:43 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:43 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:43 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:44 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:44 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:44 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:44 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:45 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:45 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:45 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [22/Dec/2025:04:36:45 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [22/Dec/2025:04:36:46 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.111 - - [22/Dec/2025:05:44:59 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.182.192 - - [22/Dec/2025:05:45:09 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.183.105 - - [22/Dec/2025:13:38:31 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.71.95.95 - - [22/Dec/2025:13:38:31 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 104.22.20.235 - - [22/Dec/2025:13:53:42 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.195.108 - - [22/Dec/2025:14:23:05 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.1.199 - - [22/Dec/2025:14:55:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.68.245.186 - - [22/Dec/2025:16:42:56 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.68.245.186 - - [22/Dec/2025:16:42:56 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.245.186 - - [22/Dec/2025:16:42:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.68.245.186 - - [22/Dec/2025:16:42:57 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.68.245.186 - - [22/Dec/2025:16:42:57 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.245.186 - - [22/Dec/2025:16:42:57 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.245.186 - - [22/Dec/2025:16:42:57 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.70.42.178 - - [22/Dec/2025:16:48:00 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.38.206 - - [22/Dec/2025:19:38:58 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:38:58 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:38:59 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:38:59 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:38:59 +0100] "GET /sx21_1.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:00 +0100] "GET /lite.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:00 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:00 +0100] "GET /minik.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:01 +0100] "GET /npi.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:01 +0100] "GET /d4.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:01 +0100] "GET /icdwb.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:02 +0100] "GET /akp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:02 +0100] "GET /mek.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:02 +0100] "GET /tll.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:03 +0100] "GET /cwsd.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:03 +0100] "GET /png.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:03 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:04 +0100] "GET /idea.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:04 +0100] "GET /litanies.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:04 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:05 +0100] "GET /ticket.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:05 +0100] "GET /lufix.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:05 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:06 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:06 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:06 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:07 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:07 +0100] "GET /amphicyon.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:07 +0100] "GET /good.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:08 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:08 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:08 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:09 +0100] "GET /law.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:09 +0100] "GET /fjpeb.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:09 +0100] "GET /asd67.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:10 +0100] "GET /np.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:10 +0100] "GET /maul.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:11 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:11 +0100] "GET /ex.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:11 +0100] "GET /sfvul.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:12 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:12 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:12 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:13 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:13 +0100] "GET /let.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:13 +0100] "GET /yca.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:14 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:14 +0100] "GET /pepe.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:14 +0100] "GET /lock1.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:15 +0100] "GET /zse.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:15 +0100] "GET /pass.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:15 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:16 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:16 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:16 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:17 +0100] "GET /bluejackets.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:17 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:17 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:18 +0100] "GET /ucp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:18 +0100] "GET /shlo.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:19 +0100] "GET /ask.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:19 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:19 +0100] "GET /kwm4.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:20 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:20 +0100] "GET /sec.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:20 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:21 +0100] "GET /price.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:21 +0100] "GET /asus.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:21 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:22 +0100] "GET /v3.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:22 +0100] "GET /j.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:23 +0100] "GET /orm.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:23 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:23 +0100] "GET /wolv.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:24 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:24 +0100] "GET /aw.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:24 +0100] "GET /nx.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:25 +0100] "GET /php.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:25 +0100] "GET /ot.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:25 +0100] "GET /ad.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:26 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:26 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:27 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:27 +0100] "GET /acp.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:27 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:28 +0100] "GET /just2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:28 +0100] "GET /ea3f.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:29 +0100] "GET /Okxob.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:29 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:29 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:30 +0100] "GET /nx9.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:30 +0100] "GET /ay.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:30 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:31 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:33 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:34 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:34 +0100] "GET /geger.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:34 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:35 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:35 +0100] "GET /xpw.php HTTP/1.1" 301 162 "-" "-" 162.158.38.206 - - [22/Dec/2025:19:39:36 +0100] "GET /dlex.php HTTP/1.1" 301 162 "-" "-" 172.70.206.131 - - [22/Dec/2025:20:21:11 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.10.40 - - [22/Dec/2025:20:56:54 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.10.40 - - [22/Dec/2025:20:57:45 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.68.10.41 - - [22/Dec/2025:22:40:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.1.146 - - [22/Dec/2025:22:53:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 162.158.87.61 - - [22/Dec/2025:23:23:41 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.69.50.158 - - [22/Dec/2025:23:25:13 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:26 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:26 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:27 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:27 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:27 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [22/Dec/2025:23:50:28 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:28 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:28 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:29 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:29 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:29 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:30 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:30 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:30 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:31 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:31 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:31 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:32 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:32 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:32 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:33 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:33 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:33 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:34 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:34 +0100] "GET /k.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:34 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:35 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:35 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:35 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:36 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:36 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:36 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:37 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:37 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:37 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:37 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:38 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:38 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:38 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:39 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:39 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:39 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:40 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [22/Dec/2025:23:50:40 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:40 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:41 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:41 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [22/Dec/2025:23:50:41 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:42 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:42 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:42 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:43 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:43 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:43 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:44 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:44 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:44 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:45 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [22/Dec/2025:23:50:45 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:45 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [22/Dec/2025:23:50:46 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:46 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:46 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:47 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:47 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:47 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:48 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:48 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:48 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:49 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [22/Dec/2025:23:50:49 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [22/Dec/2025:23:50:49 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [23/Dec/2025:00:39:03 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:03 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:04 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:04 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:05 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:05 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:05 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:06 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:06 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:06 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:07 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:07 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 172.68.225.81 - - [23/Dec/2025:00:39:07 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:08 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:08 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:09 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:09 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:09 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:10 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:10 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:10 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:11 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:11 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:11 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:12 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:12 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:13 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:13 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:13 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:14 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:14 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:14 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:15 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:15 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:16 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:16 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:16 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:17 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:17 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:17 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:18 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:18 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:19 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:19 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:19 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:20 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:20 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:20 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:21 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:21 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:22 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:22 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:22 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:23 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:23 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:23 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:24 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:24 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:25 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:25 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:25 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:26 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:26 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:26 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:27 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:27 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:27 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:28 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:28 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:29 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:29 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:29 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:30 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:30 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:30 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:31 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:31 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:32 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:32 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:32 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:33 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:33 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:33 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:34 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:34 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:35 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:35 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:35 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:36 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:36 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:36 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:37 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:37 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:38 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:38 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:38 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:39 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:39 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:39 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:40 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:40 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:41 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:41 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:41 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:42 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:42 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:42 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:43 +0100] "GET /juuuu.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:43 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:43 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:44 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:44 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:45 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:45 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:45 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:46 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:46 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:46 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:47 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:47 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:47 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:48 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:48 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:49 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:49 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:49 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:50 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:50 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:50 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:51 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:51 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:52 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:52 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:52 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:53 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:53 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:54 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:54 +0100] "GET /ac.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:54 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:55 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:55 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:56 +0100] "GET /xaz.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:56 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:56 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:57 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:57 +0100] "GET /wtz.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:58 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:58 +0100] "GET /xb.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:58 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:59 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.71.219.77 - - [23/Dec/2025:00:39:59 +0100] "GET /rh.php HTTP/1.1" 301 162 "-" "-" 162.158.182.199 - - [23/Dec/2025:06:41:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3" 162.158.42.76 - - [23/Dec/2025:07:36:41 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.42.143 - - [23/Dec/2025:07:40:26 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.103.55 - - [23/Dec/2025:09:24:20 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)" 104.23.168.109 - - [23/Dec/2025:09:24:21 +0100] "GET / HTTP/1.1" 301 162 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)" 141.101.84.236 - - [23/Dec/2025:09:35:52 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:35:53 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:35:53 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:35:54 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:35:54 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:54 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:55 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:55 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:35:55 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [23/Dec/2025:09:35:56 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:56 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:35:56 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:57 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:57 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:57 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:58 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:58 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:35:58 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:59 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:35:59 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:35:59 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:00 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:00 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:00 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:01 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:01 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:01 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:02 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:02 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:02 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:03 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:03 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:03 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:03 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:04 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:04 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:04 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:05 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:05 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:05 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:06 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:06 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:06 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:07 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:07 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:07 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:08 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:08 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:08 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:09 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:09 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [23/Dec/2025:09:36:09 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:10 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:10 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:10 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:11 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:11 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:11 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:12 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:12 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:12 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:13 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:13 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [23/Dec/2025:09:36:13 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:14 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:14 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:14 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:15 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [23/Dec/2025:09:36:15 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:15 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [23/Dec/2025:09:36:16 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [23/Dec/2025:09:36:16 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.103.4 - - [23/Dec/2025:10:22:00 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 108.162.238.86 - - [23/Dec/2025:10:26:18 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.232.81 - - [23/Dec/2025:11:51:30 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.131.171 - - [23/Dec/2025:11:51:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.110.130 - - [23/Dec/2025:12:33:04 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.188.17 - - [23/Dec/2025:14:15:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.146.19 - - [23/Dec/2025:16:04:18 +0100] "GET /archivarix.cms.php HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/archivarix.cms.php" "Mozilla/5.0 (platform; rv:geckoversion) Gecko/geckotrail Firefox/firefoxversion" 172.70.42.179 - - [23/Dec/2025:17:20:37 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.195.108 - - [23/Dec/2025:18:29:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.126.45 - - [23/Dec/2025:18:44:40 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.42.162 - - [23/Dec/2025:20:15:11 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.70.42.162 - - [23/Dec/2025:20:15:11 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.70.42.162 - - [23/Dec/2025:20:15:11 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.70.42.162 - - [23/Dec/2025:20:15:11 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.70.42.162 - - [23/Dec/2025:20:15:11 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.70.42.162 - - [23/Dec/2025:20:15:12 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.70.42.162 - - [23/Dec/2025:20:15:12 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:48 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:49 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:50 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:39:50 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:51 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:52 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:52 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:53 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:39:53 +0100] "GET /alfav4.1-tesla.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:54 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:54 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.235.218 - - [23/Dec/2025:20:39:55 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:39:55 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:56 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:57 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.235.218 - - [23/Dec/2025:20:39:57 +0100] "GET /d.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:39:58 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:39:58 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:39:59 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:39:59 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.235.218 - - [23/Dec/2025:20:40:00 +0100] "GET /h.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:01 +0100] "GET /image/c.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:01 +0100] "GET /images/alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:02 +0100] "GET /index2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:02 +0100] "GET /luuf.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:03 +0100] "GET /o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.235.218 - - [23/Dec/2025:20:40:03 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:04 +0100] "GET /phpmailer.lang-sv.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:04 +0100] "GET /sa.php?p= HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:05 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:06 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:06 +0100] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:07 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:07 +0100] "GET /up.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:08 +0100] "GET /uploaded_script.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:08 +0100] "GET /vendor/composer/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:09 +0100] "GET /w.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:10 +0100] "GET /wp-admin/a.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:10 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:11 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:11 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:12 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:12 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:13 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:13 +0100] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:14 +0100] "GET /wp-admin/k.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:15 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:15 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:16 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:16 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:17 +0100] "GET /wp-admin/s.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.235.218 - - [23/Dec/2025:20:40:17 +0100] "GET /wp-admin/w.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:18 +0100] "GET /wp-admin/z.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:19 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:19 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:20 +0100] "GET /wp-content/inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:20 +0100] "GET /wp-content/l.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:21 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:21 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:22 +0100] "GET /wp-content/plugins/akismet/akismet.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:22 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:23 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:24 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:24 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:25 +0100] "GET /wp-includes/4.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:25 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:26 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:26 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:27 +0100] "GET /wp-includes/gelay.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:28 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:28 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:29 +0100] "GET /wp-includes/js/tinymce/plugins/compat3x/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:29 +0100] "GET /wp-includes/mini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.218 - - [23/Dec/2025:20:40:30 +0100] "GET /wp-video.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.235.218 - - [23/Dec/2025:20:40:30 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.218 - - [23/Dec/2025:20:40:31 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:40 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:41 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:41 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:41 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:42 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:42 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:42 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:42 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:43 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:43 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:43 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:43 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:44 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:44 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:44 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.63.200 - - [23/Dec/2025:20:55:44 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:45 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:45 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:45 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:46 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.63.200 - - [23/Dec/2025:20:55:46 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:46 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:46 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:47 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:47 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:47 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.63.200 - - [23/Dec/2025:20:55:47 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:48 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:48 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:48 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:48 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:49 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:49 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:49 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:49 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:50 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:50 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:50 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:50 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:51 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:51 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:51 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:51 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:52 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:52 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:52 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:53 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:53 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:53 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:53 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:54 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:54 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:54 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:54 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:55 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:55 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:55 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:55 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:56 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:56 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:56 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:56 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:57 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:57 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:57 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:57 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.63.200 - - [23/Dec/2025:20:55:58 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:58 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:58 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [23/Dec/2025:20:55:59 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:59 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [23/Dec/2025:20:55:59 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.144.21 - - [23/Dec/2025:21:56:40 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.111.90 - - [23/Dec/2025:21:57:50 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.184.47 - - [23/Dec/2025:22:40:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.255.140 - - [23/Dec/2025:23:16:59 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.71.255.54 - - [23/Dec/2025:23:16:59 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.71.255.54 - - [23/Dec/2025:23:16:59 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.71.255.54 - - [23/Dec/2025:23:16:59 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.71.255.54 - - [23/Dec/2025:23:17:00 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.71.255.54 - - [23/Dec/2025:23:17:00 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.71.255.54 - - [23/Dec/2025:23:17:00 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.245.177 - - [23/Dec/2025:23:41:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.69.22.68 - - [24/Dec/2025:00:29:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 172.71.159.95 - - [24/Dec/2025:00:33:51 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 172.69.135.139 - - [24/Dec/2025:00:56:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 172.69.94.242 - - [24/Dec/2025:03:45:36 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.95.117 - - [24/Dec/2025:03:45:37 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.95.117 - - [24/Dec/2025:03:45:38 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.95.117 - - [24/Dec/2025:03:45:38 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.95.117 - - [24/Dec/2025:03:45:39 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.95.117 - - [24/Dec/2025:03:45:39 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.95.117 - - [24/Dec/2025:03:45:40 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.95.117 - - [24/Dec/2025:03:45:40 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:41 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:42 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:42 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:43 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:43 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:44 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:44 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:45 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:45 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:46 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:46 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.242 - - [24/Dec/2025:03:45:47 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:48 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:48 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:49 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:49 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:50 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:50 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:51 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:51 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:52 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:52 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:53 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:53 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:54 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:55 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:55 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:56 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:56 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:57 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:57 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.242 - - [24/Dec/2025:03:45:58 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.242 - - [24/Dec/2025:03:45:58 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.251.195 - - [24/Dec/2025:04:41:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.184.25 - - [24/Dec/2025:06:38:11 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.195.210 - - [24/Dec/2025:06:41:26 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.183.70 - - [24/Dec/2025:08:40:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 104.23.221.222 - - [24/Dec/2025:08:40:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 172.71.242.159 - - [24/Dec/2025:09:27:52 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:53 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:53 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:53 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:54 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [24/Dec/2025:09:27:54 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:54 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:54 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:55 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:55 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:55 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:56 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:56 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:56 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:56 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:57 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:57 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:57 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:58 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:58 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:58 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:58 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:59 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:59 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:27:59 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:27:59 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:00 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:00 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:00 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:01 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:01 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:01 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:01 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:02 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:02 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:02 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:03 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:03 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:03 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:03 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:04 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:04 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:04 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [24/Dec/2025:09:28:05 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:05 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:05 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:05 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:06 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:06 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:06 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:06 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:07 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:07 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:07 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:08 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:08 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:08 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:08 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:09 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:09 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:09 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:09 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:10 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:10 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:10 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:11 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:11 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:11 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:11 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:12 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [24/Dec/2025:09:28:12 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [24/Dec/2025:09:28:12 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:04 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:05 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:06 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:06 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:07 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:07 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:08 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:09 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:09 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:10 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:10 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:11 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:11 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:12 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:12 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:13 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:14 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:14 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:15 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:15 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:16 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:16 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:17 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:17 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:18 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:19 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:19 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:20 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:20 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:21 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:21 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:22 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:22 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:23 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:23 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:24 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:25 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:25 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [24/Dec/2025:10:43:26 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:26 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [24/Dec/2025:10:43:27 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.6.132 - - [24/Dec/2025:11:07:16 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.69.58.148 - - [24/Dec/2025:11:07:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 104.23.172.10 - - [24/Dec/2025:11:10:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.39.198 - - [24/Dec/2025:11:18:15 +0100] "GET /worksec.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:16 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:17 +0100] "GET /ultra.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:17 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:17 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:18 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:18 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:18 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:19 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:19 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:19 +0100] "GET /wp-admin/classwithtostring.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:20 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:20 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:20 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:21 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:21 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:21 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:22 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:22 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:22 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:23 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:23 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:23 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:24 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:24 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:25 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:25 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:25 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:26 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:26 +0100] "GET /wp-admin/product.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:26 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:27 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:27 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:27 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:28 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:28 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:28 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:29 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:29 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:29 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:30 +0100] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:30 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:30 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:31 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:31 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:31 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:32 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:32 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:32 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:33 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:33 +0100] "GET /wp-content/uploads/wc-logs/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:33 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:34 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:34 +0100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:35 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:35 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:35 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:36 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:36 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:36 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:37 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:37 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:37 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:38 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:38 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:38 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:39 +0100] "GET /wp-includes/Text/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:39 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:39 +0100] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:40 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:40 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:40 +0100] "GET /wp-includes/bk/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:41 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:41 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:41 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:42 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:42 +0100] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:42 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:43 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:43 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:43 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:44 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:44 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:44 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:45 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:45 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:45 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:46 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:46 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:46 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:47 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:47 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:47 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:48 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:48 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:48 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:49 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:49 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:49 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:50 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:50 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:50 +0100] "GET /xmldoc/ HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [24/Dec/2025:11:18:51 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.70.42.178 - - [24/Dec/2025:12:24:21 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.162.40 - - [24/Dec/2025:13:11:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.172.20 - - [24/Dec/2025:14:11:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.88.110 - - [24/Dec/2025:14:51:22 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.242.5 - - [24/Dec/2025:14:51:24 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.170.250 - - [24/Dec/2025:14:51:26 +0100] "GET /wp-content/themes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.170.35 - - [24/Dec/2025:14:51:26 +0100] "GET /wp-admin/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.170.35 - - [24/Dec/2025:14:51:27 +0100] "GET /wp-includes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.170.35 - - [24/Dec/2025:14:51:27 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.170.35 - - [24/Dec/2025:14:51:28 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.170.35 - - [24/Dec/2025:14:51:29 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:30 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.123 - - [24/Dec/2025:14:51:32 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.123 - - [24/Dec/2025:14:51:33 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.123 - - [24/Dec/2025:14:51:33 +0100] "GET /blurbs.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.123 - - [24/Dec/2025:14:51:34 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.123 - - [24/Dec/2025:14:51:34 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:35 +0100] "GET /shelp.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:35 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:36 +0100] "GET /dex.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:36 +0100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:37 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:37 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:38 +0100] "GET /wp-admin/zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:39 +0100] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:39 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:40 +0100] "GET /shlo.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:41 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:41 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:42 +0100] "GET /php8.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:42 +0100] "GET /lufix1.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:43 +0100] "GET /witmm.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:43 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:44 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:44 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:45 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:46 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:46 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:47 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:48 +0100] "GET /txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:48 +0100] "GET /wp-content/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:49 +0100] "GET /wp-admin/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:49 +0100] "GET /postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:50 +0100] "GET /wp-content/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 108.162.226.190 - - [24/Dec/2025:14:51:50 +0100] "GET /wp-admin/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.232.155 - - [24/Dec/2025:14:52:47 +0100] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.23.0" 172.70.50.138 - - [24/Dec/2025:15:14:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; LumeWebScan/2.0; +https://lumeweaver.com/)" 172.71.195.108 - - [24/Dec/2025:15:57:33 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.210.37 - - [24/Dec/2025:17:14:47 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.57 - - [24/Dec/2025:17:14:48 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.57 - - [24/Dec/2025:17:14:48 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.57 - - [24/Dec/2025:17:14:49 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.57 - - [24/Dec/2025:17:14:49 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.57 - - [24/Dec/2025:17:14:49 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.57 - - [24/Dec/2025:17:14:50 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:51 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:51 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:51 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.37 - - [24/Dec/2025:17:14:52 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:52 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:52 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:53 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:53 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:53 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:54 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.37 - - [24/Dec/2025:17:14:54 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:54 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:55 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.37 - - [24/Dec/2025:17:14:55 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:55 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.37 - - [24/Dec/2025:17:14:56 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:56 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:56 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.37 - - [24/Dec/2025:17:14:57 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:57 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:14:57 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.37 - - [24/Dec/2025:17:14:58 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.37 - - [24/Dec/2025:17:14:58 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.37 - - [24/Dec/2025:17:14:58 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.37 - - [24/Dec/2025:17:14:59 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.37 - - [24/Dec/2025:17:14:59 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.37 - - [24/Dec/2025:17:14:59 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:15:00 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:15:00 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:15:00 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:15:01 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.37 - - [24/Dec/2025:17:15:01 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:15:01 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.37 - - [24/Dec/2025:17:15:02 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.159.95 - - [24/Dec/2025:17:18:57 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.159.49 - - [24/Dec/2025:17:18:57 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.248.202 - - [24/Dec/2025:18:37:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.70.46.74 - - [24/Dec/2025:20:04:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.23.175.157 - - [24/Dec/2025:20:50:49 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.71.218.199 - - [24/Dec/2025:21:28:27 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:28 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:28 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:29 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:29 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:29 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:30 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:30 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:31 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:31 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:31 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:32 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:32 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:32 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:33 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:33 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:33 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:34 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.218.199 - - [24/Dec/2025:21:28:34 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:35 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:35 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.218.199 - - [24/Dec/2025:21:28:35 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:36 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:36 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:36 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:37 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:37 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:37 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:38 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:38 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:39 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:39 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:39 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:40 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:40 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:41 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:41 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:41 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:42 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:42 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:42 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:43 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:43 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:43 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:44 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:44 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:45 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:45 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:45 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:46 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:46 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:46 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:47 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:47 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:48 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:48 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:48 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:49 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:49 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:49 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:50 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:50 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:50 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:51 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:51 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:52 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:52 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:52 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:53 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:53 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:53 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:54 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.218.199 - - [24/Dec/2025:21:28:54 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:54 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:55 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:55 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:56 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:56 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:56 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:57 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:57 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:57 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:58 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:58 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:59 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:28:59 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:28:59 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:00 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:00 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:00 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:01 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:01 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:02 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:02 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:02 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:03 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:03 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:03 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:04 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:04 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:04 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:05 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:05 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:06 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:06 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:06 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:07 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:07 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:07 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:08 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:08 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:08 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:09 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.218.199 - - [24/Dec/2025:21:29:09 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.218.199 - - [24/Dec/2025:21:29:10 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.63.200 - - [24/Dec/2025:22:22:20 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:22 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:22 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:22 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.158 - - [24/Dec/2025:22:22:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:23 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:23 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.158 - - [24/Dec/2025:22:22:23 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:23 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:24 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:24 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.158 - - [24/Dec/2025:22:22:24 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.158 - - [24/Dec/2025:22:22:24 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.158 - - [24/Dec/2025:22:22:25 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.158 - - [24/Dec/2025:22:22:25 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:25 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:25 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:26 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:26 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:26 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:27 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:27 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:27 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:27 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:28 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:28 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:28 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:28 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:29 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:29 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:29 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:29 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:30 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.63.200 - - [24/Dec/2025:22:22:30 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:30 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:30 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:31 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:31 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:31 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:32 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:32 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:32 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:32 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:33 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:33 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:33 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:33 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:34 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:34 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:34 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:34 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:35 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:35 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:35 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:35 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:36 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:36 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:36 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:36 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:37 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:37 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:37 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:38 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:38 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:38 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:38 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:39 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:39 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.200 - - [24/Dec/2025:22:22:39 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:39 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.200 - - [24/Dec/2025:22:22:40 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.152.93 - - [25/Dec/2025:00:16:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.69.166.80 - - [25/Dec/2025:00:16:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.166.80 - - [25/Dec/2025:00:16:52 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.69.166.80 - - [25/Dec/2025:00:16:53 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.69.166.80 - - [25/Dec/2025:00:16:54 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.69.166.80 - - [25/Dec/2025:00:16:54 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.69.166.80 - - [25/Dec/2025:00:16:54 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.69.166.80 - - [25/Dec/2025:00:16:55 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.69.166.80 - - [25/Dec/2025:00:16:55 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.69.166.80 - - [25/Dec/2025:00:16:56 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.71.152.93 - - [25/Dec/2025:00:16:56 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.71.134.112 - - [25/Dec/2025:04:02:51 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.225.39 - - [25/Dec/2025:04:02:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 162.158.103.199 - - [25/Dec/2025:05:23:42 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36 OPR/34.0.2036.47" 162.158.102.156 - - [25/Dec/2025:05:23:42 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0; MDDRJS)" 172.64.198.20 - - [25/Dec/2025:05:23:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 7.1.1; Z982 Build/NMF26V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.109 Mobile Safari/537.36" 104.23.223.42 - - [25/Dec/2025:05:23:43 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.172.174 - - [25/Dec/2025:05:23:43 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3)" 104.23.223.127 - - [25/Dec/2025:05:23:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:15.0) Gecko/20100101 Firefox/15.0.1" 104.23.217.76 - - [25/Dec/2025:05:23:43 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; OpenBSD i386; en-US; rv:1.8.1.4) Gecko/20071127 Firefox/2.0.0.11" 172.64.200.60 - - [25/Dec/2025:05:23:44 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.1 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.1" 104.23.221.189 - - [25/Dec/2025:05:23:44 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.6) Gecko/20091201 MRA 5.5 (build 02842) Firefox/3.5.6 (.NET CLR 3.5.30729)" 104.23.223.42 - - [25/Dec/2025:05:23:44 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36 OPR/44.0.2510.1449" 172.64.198.52 - - [25/Dec/2025:05:23:44 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_1 like Mac OS X) AppleWebKit/604.3.1 (KHTML, like Gecko) Version/11.0 Mobile/15B5066f Safari/604.1" 172.64.198.20 - - [25/Dec/2025:05:23:45 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 7.0; Tablet; rv:56.0) Gecko/56.0 Firefox/56.0" 172.64.198.52 - - [25/Dec/2025:05:23:45 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2)" 172.64.200.25 - - [25/Dec/2025:05:23:45 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.97 Safari/537.22" 172.64.200.25 - - [25/Dec/2025:05:23:46 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; fr-fr) AppleWebKit/531.21.11 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10" 172.64.200.25 - - [25/Dec/2025:05:23:46 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPod; CPU iPhone OS 6_0_1 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A523 Safari/8536.25" 172.64.198.20 - - [25/Dec/2025:05:23:47 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:43.0) Gecko/20100101 Firefox/43.0" 162.158.183.84 - - [25/Dec/2025:05:23:47 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Opera/9.02 (Windows NT 5.0; U; sv)" 104.23.221.189 - - [25/Dec/2025:05:23:47 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; InfoPath.3)" 172.64.200.25 - - [25/Dec/2025:05:23:48 +0100] "GET /web/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)" 162.158.108.90 - - [25/Dec/2025:05:55:50 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.108.90 - - [25/Dec/2025:05:55:51 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.108.90 - - [25/Dec/2025:05:55:51 +0100] "GET /wp-json/ HTTP/1.1" 301 162 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.182.193 - - [25/Dec/2025:09:06:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 172.68.242.4 - - [25/Dec/2025:09:48:24 +0100] "GET /.env HTTP/1.1" 301 162 "-" "-" 172.71.166.59 - - [25/Dec/2025:10:19:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 172.70.92.156 - - [25/Dec/2025:13:24:08 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:10 +0100] "GET /ii5file.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:10 +0100] "GET /yu.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:11 +0100] "GET /bbn.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:11 +0100] "GET /ssxsl.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:12 +0100] "GET /tqloh.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:13 +0100] "GET /hbyra.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:13 +0100] "GET /dparm.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:14 +0100] "GET /doelr.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:14 +0100] "GET /xenium4x.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:15 +0100] "GET /dout.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:15 +0100] "GET /dng.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:16 +0100] "GET /rh1.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:16 +0100] "GET /w3llstore.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:17 +0100] "GET /s12.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:18 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:18 +0100] "GET /ol.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:18 +0100] "GET /man.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:19 +0100] "GET /g7y.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:19 +0100] "GET /ging.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:20 +0100] "GET /veuntzdf.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:21 +0100] "GET /xenium4.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:21 +0100] "GET /pu8.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:22 +0100] "GET /wp-blog-front.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:22 +0100] "GET /wp-Blogs.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:23 +0100] "GET /wp-loccs.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:24 +0100] "GET /wp-mails.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:24 +0100] "GET /blurbs18.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:25 +0100] "GET /green.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:25 +0100] "GET /kao.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:26 +0100] "GET /shell_14dcb27c.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:26 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:27 +0100] "GET /zc-729.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:27 +0100] "GET /bolt.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:28 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:29 +0100] "GET /file30.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:29 +0100] "GET /clss.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:30 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:30 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:30 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:31 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:32 +0100] "GET /about.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:32 +0100] "GET /atex1.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:33 +0100] "GET /wp-advaced.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:34 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:34 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:35 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:36 +0100] "GET /wp-64wscx6shd.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:36 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:37 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:37 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:37 +0100] "GET /z60.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:38 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:38 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:39 +0100] "GET /kdgok.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:39 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:40 +0100] "GET /okxh.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:40 +0100] "GET /ghreshttryu.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:40 +0100] "GET /krypton.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:41 +0100] "GET /error_log.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:41 +0100] "GET /d12.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:42 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:42 +0100] "GET /dox.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:43 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:43 +0100] "GET /yas.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:44 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:44 +0100] "GET /tesTyuj.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:45 +0100] "GET /ww3.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:45 +0100] "GET /budmachine/web/s.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:46 +0100] "GET /wp-sid.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:46 +0100] "GET /wp-title.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:46 +0100] "GET /wp-home.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:47 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:48 +0100] "GET /vanda.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:49 +0100] "GET /sid-file.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:49 +0100] "GET /l3gi0n.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:49 +0100] "GET /bo.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:51 +0100] "GET /Contrller.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:51 +0100] "GET /o2.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:52 +0100] "GET /inghl.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:52 +0100] "GET /wp-securitiy.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:53 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:54 +0100] "GET /wp-ac.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:54 +0100] "GET /karma_57c3d4.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:55 +0100] "GET /fc72f.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:55 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:56 +0100] "GET /jjrpo.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:57 +0100] "GET /asd.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:24:59 +0100] "GET /xtt.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:00 +0100] "GET /s.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:00 +0100] "GET /t.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:00 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:01 +0100] "GET /jdlqi.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:01 +0100] "GET /khgdl.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:02 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:02 +0100] "GET /xopvne.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:02 +0100] "GET /lm18.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:03 +0100] "GET /5b9ac.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:03 +0100] "GET /co.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:04 +0100] "GET /56c53.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:04 +0100] "GET /ce.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:05 +0100] "GET /domains.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:06 +0100] "GET /55b76.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:06 +0100] "GET /asa.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:06 +0100] "GET /4fk6.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:07 +0100] "GET /z123.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:07 +0100] "GET /ccea.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:08 +0100] "GET /a5e0a.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:08 +0100] "GET /qaez.php56 HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:09 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:09 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:10 +0100] "GET /s121ws2s.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:11 +0100] "GET /ww1.php?= HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:11 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:12 +0100] "GET /ww3.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:12 +0100] "GET /783de.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:13 +0100] "GET /lm15.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:14 +0100] "GET /gdn.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:14 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:15 +0100] "GET /3i8som87avh59dosfymtvCakc.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:16 +0100] "GET /rzki.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:16 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:17 +0100] "GET /6kUgr4yGzxN.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:18 +0100] "GET /rp8zi.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:18 +0100] "GET /cc3.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:18 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:19 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:19 +0100] "GET /wps.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:20 +0100] "GET /qV9GbcJwZgK.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:20 +0100] "GET /qsntqiho.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:20 +0100] "GET /qjaqjahu.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:21 +0100] "GET /qhLaGswd9DS.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:22 +0100] "GET /pwyjwrfr.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:22 +0100] "GET /pNRzcP6wtYy.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:22 +0100] "GET /ox8xhkkw.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:23 +0100] "GET /oc460l3x.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:23 +0100] "GET /NWqz649FIe7.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:24 +0100] "GET /nucqsqeg.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:24 +0100] "GET /mhpglaje.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:25 +0100] "GET /LvCBeZWaSgQ.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:25 +0100] "GET /KV7EGJmhHzX.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:26 +0100] "GET /ijNdPI1Orya.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:26 +0100] "GET /HPum4ZEBJRC.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:27 +0100] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:27 +0100] "GET /8xg5Bv6XIUw.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:28 +0100] "GET /aGeTbFjB5Zu.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:28 +0100] "GET /BMjXQkgwpeb.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:29 +0100] "GET /FSCMNvnjPX4.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:30 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:30 +0100] "GET /hello.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:30 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:31 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:32 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:33 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:33 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:34 +0100] "GET /tt.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:35 +0100] "GET /sikma.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:35 +0100] "GET /44.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:36 +0100] "GET /database.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:37 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.70.92.156 - - [25/Dec/2025:13:25:37 +0100] "GET /zc-104.php HTTP/1.1" 301 162 "-" "-" 162.158.63.76 - - [25/Dec/2025:13:51:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 162.159.119.63 - - [25/Dec/2025:13:51:57 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.71.195.108 - - [25/Dec/2025:14:18:52 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.38.207 - - [25/Dec/2025:15:24:27 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:28 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:28 +0100] "GET /byp8.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:29 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:29 +0100] "GET /jga.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:29 +0100] "GET /gdn.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:30 +0100] "GET /tebar.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:30 +0100] "GET /ty226.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:30 +0100] "GET /songsa.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:31 +0100] "GET /qing2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:31 +0100] "GET /massby2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:31 +0100] "GET /qual.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:32 +0100] "GET /udnkq.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:32 +0100] "GET /ng.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:32 +0100] "GET /z4qmm5.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:32 +0100] "GET /no3.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:33 +0100] "GET /om.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:33 +0100] "GET /webix.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:33 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:34 +0100] "GET /cka.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:34 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:34 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:35 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:35 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:35 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:36 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:36 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:36 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:37 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:37 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:37 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:38 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:38 +0100] "GET /juuuu.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:38 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:39 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:39 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:39 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:40 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:40 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:40 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:41 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:41 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:41 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:42 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:42 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:42 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:43 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:43 +0100] "GET /xb.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:43 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:44 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:44 +0100] "GET /wtz.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:44 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:45 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:45 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:45 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:46 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:46 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:46 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:47 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:47 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:47 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:48 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:48 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:48 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:49 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:49 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:49 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:50 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:50 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:50 +0100] "GET /xaz.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:51 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:51 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:51 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:52 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:52 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:52 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:53 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:53 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:53 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:53 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:54 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:54 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:54 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:55 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:55 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:55 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:56 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:56 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:56 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:57 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:57 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:57 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:58 +0100] "GET /ac.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:58 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:58 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:59 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:59 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:24:59 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:25:00 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 162.158.38.207 - - [25/Dec/2025:15:25:00 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 172.70.42.179 - - [25/Dec/2025:15:31:43 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.1.199 - - [25/Dec/2025:15:51:06 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.6.150 - - [25/Dec/2025:16:47:38 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:39 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:40 +0100] "GET /d4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:40 +0100] "GET /ad.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:40 +0100] "GET /dlex.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:41 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:41 +0100] "GET /pass.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:41 +0100] "GET /good.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:42 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:42 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:42 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:43 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:43 +0100] "GET /npi.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:43 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:44 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:44 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:44 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:45 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:45 +0100] "GET /litanies.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:45 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:46 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:46 +0100] "GET /kwm4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:46 +0100] "GET /just2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:47 +0100] "GET /png.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:47 +0100] "GET /geger.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:47 +0100] "GET /let.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:48 +0100] "GET /np.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:48 +0100] "GET /ask.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:48 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:49 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:49 +0100] "GET /mek.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:49 +0100] "GET /fjpeb.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:50 +0100] "GET /ex.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:50 +0100] "GET /asd67.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:50 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:51 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:51 +0100] "GET /shlo.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:51 +0100] "GET /sec.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:52 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:52 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:52 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:53 +0100] "GET /law.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:53 +0100] "GET /bluejackets.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:53 +0100] "GET /php.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:54 +0100] "GET /sx21_1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:54 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:54 +0100] "GET /nx9.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:55 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:55 +0100] "GET /aw.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:55 +0100] "GET /sfvul.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:56 +0100] "GET /icdwb.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:56 +0100] "GET /ticket.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:56 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:57 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:57 +0100] "GET /amphicyon.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:57 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:58 +0100] "GET /lock1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:58 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:58 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:59 +0100] "GET /v3.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:59 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:47:59 +0100] "GET /minik.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:00 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:00 +0100] "GET /nx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:00 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:01 +0100] "GET /acp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:01 +0100] "GET /xpw.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:01 +0100] "GET /lufix.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:02 +0100] "GET /akp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:02 +0100] "GET /cwsd.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:02 +0100] "GET /tll.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:03 +0100] "GET /Okxob.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:03 +0100] "GET /idea.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:03 +0100] "GET /pepe.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:04 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:04 +0100] "GET /yca.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:05 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:05 +0100] "GET /ot.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:05 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:06 +0100] "GET /j.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:06 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:06 +0100] "GET /ucp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:07 +0100] "GET /zse.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:07 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:07 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:07 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:08 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:08 +0100] "GET /orm.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:08 +0100] "GET /ay.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:09 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:09 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:10 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:10 +0100] "GET /wolv.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:10 +0100] "GET /ea3f.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:11 +0100] "GET /price.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Dec/2025:16:48:11 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.70.42.178 - - [25/Dec/2025:16:57:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.245.186 - - [25/Dec/2025:16:57:42 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.107.3 - - [25/Dec/2025:17:44:10 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "-" 162.158.106.221 - - [25/Dec/2025:17:44:13 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 162.158.106.221 - - [25/Dec/2025:17:44:14 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 162.158.106.221 - - [25/Dec/2025:17:44:14 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "-" 162.158.106.221 - - [25/Dec/2025:17:44:15 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "-" "-" 162.158.106.221 - - [25/Dec/2025:17:44:15 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 162.158.106.221 - - [25/Dec/2025:17:44:15 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:16 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:16 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:17 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:17 +0100] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:17 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:18 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:18 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:19 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:20 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:21 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:22 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:23 +0100] "GET /wp-includes/random_compat/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:24 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:25 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:26 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:26 +0100] "GET /wp-includes/Text/Diff/Engine/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:27 +0100] "GET /wp-includes/assets/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:27 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:28 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:28 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:29 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:29 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:30 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:31 +0100] "GET /wp-includes/Text/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:32 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:32 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:33 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:33 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:34 +0100] "GET /images/images/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:34 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:35 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:35 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:36 +0100] "GET /wp-includes/bk/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:36 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:37 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:37 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:37 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:38 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:38 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:39 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:39 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:40 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:40 +0100] "GET /wp-includes/js/tinymce/plugins/colorpicker/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:41 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:41 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:41 +0100] "GET /wp-admin/css/colors/blue/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:42 +0100] "GET /wp-admin/css/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:42 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:43 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:43 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:44 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:44 +0100] "GET /wp-admin/product.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:45 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:45 +0100] "GET /wp-includes/customize/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:46 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:46 +0100] "GET /wp-includes/block-bindings/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:46 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:47 +0100] "GET /async-upload.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:47 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:48 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:48 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:49 +0100] "GET /wp-includes/block-supports/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:49 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:50 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:51 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:51 +0100] "GET /.tmb/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:52 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:53 +0100] "GET /wp-admin/network/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:53 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:54 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:55 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:56 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:56 +0100] "GET /wp-includes/images/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:56 +0100] "GET /wp-content/uploads/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:57 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:57 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:58 +0100] "GET /wp-admin/images/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:58 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:44:59 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:00 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:00 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:01 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:02 +0100] "GET /wp-includes/PHPMailer/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:03 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:03 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:04 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:05 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:05 +0100] "GET /fx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:06 +0100] "GET /assets/images/about.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:06 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:07 +0100] "GET /db6d0/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:07 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:08 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:08 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:09 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:09 +0100] "GET /xmldoc/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:10 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:11 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:11 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:12 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:12 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:13 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:13 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:14 +0100] "GET /wp-content/themes/pridmag/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:14 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:15 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:15 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:16 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:16 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:17 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:17 +0100] "GET /admin.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:18 +0100] "GET /adminfuns.php?attempt=1 HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:18 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:19 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:19 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:20 +0100] "GET /wp-admin/css/colors/ocean/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:20 +0100] "GET /wp-content/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:21 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:22 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:22 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:23 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:23 +0100] "GET /wp-admin/classwithtostring.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:24 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:24 +0100] "GET /wp-content/uploads/wc-logs/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:25 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:25 +0100] "GET /wp-includes/fonts/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:26 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:26 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:27 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:27 +0100] "GET /uploads/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:27 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:28 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:29 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:29 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:30 +0100] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:30 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:31 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:31 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:32 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:32 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:33 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:33 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:33 +0100] "GET /wp-admin/includes/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:34 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:34 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:35 +0100] "GET //wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:35 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:36 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:36 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:37 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:37 +0100] "GET /wp-content/languages/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:38 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:38 +0100] "GET /alf.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:39 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:39 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:39 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:40 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:41 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:41 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:42 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:43 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:44 +0100] "GET /wp-admin/js/widgets/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:46 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:46 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:47 +0100] "GET /xxl.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:47 +0100] "GET /help.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:47 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:48 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:49 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:49 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:50 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:50 +0100] "GET /wp-includes/rest-api/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:51 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:52 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:54 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:55 +0100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:56 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:57 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:58 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:58 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:59 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:45:59 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:00 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:01 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:01 +0100] "GET /wp-includes/rest-api/fields/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:02 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:02 +0100] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:03 +0100] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:04 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:04 +0100] "GET /public/assets/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:05 +0100] "GET /termps.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:05 +0100] "GET /wp-includes/ID3/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:06 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:06 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:07 +0100] "GET /wp-admin/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:07 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:08 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:08 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:09 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:09 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:10 +0100] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:10 +0100] "GET /.well-known/alfacgiapi/getdir.alfa HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:11 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:11 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:12 +0100] "GET /wp-content/themes/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:12 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:12 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [25/Dec/2025:17:46:13 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "-" 172.69.89.197 - - [25/Dec/2025:17:47:37 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.89.197 - - [25/Dec/2025:17:47:38 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.134.166 - - [25/Dec/2025:18:12:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.85.66 - - [25/Dec/2025:19:15:37 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.191.74 - - [25/Dec/2025:20:56:41 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.71.191.74 - - [25/Dec/2025:20:56:41 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.71.191.74 - - [25/Dec/2025:20:56:41 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.71.191.74 - - [25/Dec/2025:20:56:42 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.71.191.74 - - [25/Dec/2025:20:56:42 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.71.191.74 - - [25/Dec/2025:20:56:42 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.71.191.74 - - [25/Dec/2025:20:56:42 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.71.255.140 - - [25/Dec/2025:22:18:00 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.71.255.140 - - [25/Dec/2025:22:18:00 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.71.255.140 - - [25/Dec/2025:22:18:00 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.71.255.140 - - [25/Dec/2025:22:18:01 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.71.255.140 - - [25/Dec/2025:22:18:01 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.71.255.140 - - [25/Dec/2025:22:18:01 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.71.255.140 - - [25/Dec/2025:22:18:01 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.85.156 - - [25/Dec/2025:22:20:35 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.85.156 - - [25/Dec/2025:22:20:36 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.85.156 - - [25/Dec/2025:22:20:36 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.85.156 - - [25/Dec/2025:22:20:36 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:37 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:37 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:37 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:38 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:38 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:38 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:38 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:39 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:39 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:39 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:39 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:40 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:40 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:40 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:40 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.119.144 - - [25/Dec/2025:22:20:41 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:41 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:41 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:41 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:42 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:42 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:42 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:42 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:43 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:43 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:43 +0100] "GET /k.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:43 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:44 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:44 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:44 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:44 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:45 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:45 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:45 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:45 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:46 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:46 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:46 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:46 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:47 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:47 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:47 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:47 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:48 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:48 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:48 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:48 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:49 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:49 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.119.144 - - [25/Dec/2025:22:20:49 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:49 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:50 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:50 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:50 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:50 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.119.144 - - [25/Dec/2025:22:20:51 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:51 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:51 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:51 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:52 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:52 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:52 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:52 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:53 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:53 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:53 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:53 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:54 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:54 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.119.144 - - [25/Dec/2025:22:20:54 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:54 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.119.144 - - [25/Dec/2025:22:20:55 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:55 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:55 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:55 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:56 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:56 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.119.144 - - [25/Dec/2025:22:20:56 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:56 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:57 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:57 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:57 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:57 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:58 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:58 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:58 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:58 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:20:59 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:59 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:59 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:20:59 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:00 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:21:00 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:00 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:00 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:21:01 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:01 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:01 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:21:01 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.119.144 - - [25/Dec/2025:22:21:02 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:02 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:21:02 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:02 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:21:03 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:03 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.119.144 - - [25/Dec/2025:22:21:03 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:03 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:04 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:04 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:04 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.119.144 - - [25/Dec/2025:22:21:04 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.184.46 - - [25/Dec/2025:22:27:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.24.21 - - [26/Dec/2025:01:04:10 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:10 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:11 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:11 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.21 - - [26/Dec/2025:01:04:11 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:11 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:12 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:12 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:12 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:12 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:13 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:13 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:13 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:13 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.21 - - [26/Dec/2025:01:04:14 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:14 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:14 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:14 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:15 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:15 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:15 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:15 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:16 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:16 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:16 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:17 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:17 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:17 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:17 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:18 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:18 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:18 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:18 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:19 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:19 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:19 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:19 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:20 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:20 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:20 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:20 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:21 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:21 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:21 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:21 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:22 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:22 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:22 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:22 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.21 - - [26/Dec/2025:01:04:23 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:23 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:23 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:24 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:24 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:24 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:24 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:25 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:25 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:25 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:25 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:26 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:26 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:26 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:26 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:27 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:27 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:27 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:27 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:28 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:28 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:28 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:28 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.21 - - [26/Dec/2025:01:04:29 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:29 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:29 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:29 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:30 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:30 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:30 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:31 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:31 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:31 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:31 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:32 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:32 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:32 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:32 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:33 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:33 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:33 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:33 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:34 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:34 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:34 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:34 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:35 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:35 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:35 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:35 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:36 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:36 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:36 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:37 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:37 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:37 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:37 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:38 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:38 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:38 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:38 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:39 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:39 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:39 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:39 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:40 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:40 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:40 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.21 - - [26/Dec/2025:01:04:40 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:41 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:41 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.24.21 - - [26/Dec/2025:01:04:41 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:41 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:42 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:42 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:42 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.24.21 - - [26/Dec/2025:01:04:42 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:43 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:43 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.24.21 - - [26/Dec/2025:01:04:43 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.254.16 - - [26/Dec/2025:01:35:22 +0100] "GET / HTTP/1.1" 301 162 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 172.69.221.73 - - [26/Dec/2025:02:59:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.68.10.41 - - [26/Dec/2025:06:13:57 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.221.38 - - [26/Dec/2025:06:16:44 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.70.215.116 - - [26/Dec/2025:06:34:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:20 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:21 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:21 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:22 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:23 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:23 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:23 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:24 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:24 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:24 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:25 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:25 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:26 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:26 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:26 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:27 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:27 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:28 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:28 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:28 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:29 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:29 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:30 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:30 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:30 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:31 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:31 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:32 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:32 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:32 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:33 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:33 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:34 +0100] "GET /mini HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:34 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:34 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:35 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:35 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:36 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:36 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:36 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:37 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:37 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:38 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:38 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:38 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:39 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:39 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:40 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:40 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:40 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:41 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:41 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:42 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:42 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:42 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:43 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:43 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:44 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:44 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:44 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:45 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:45 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:45 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:46 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:46 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:47 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:47 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:47 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:48 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:48 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:49 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:49 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:49 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:50 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:50 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:51 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:51 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:51 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.105 - - [26/Dec/2025:09:13:52 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:52 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:53 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:53 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:53 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:54 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:13:54 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:55 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:55 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:55 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:56 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:56 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:57 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:57 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:57 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:58 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:58 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:58 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:59 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:13:59 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:00 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:00 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:14:00 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:01 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:01 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:02 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:14:02 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:02 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:14:03 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:14:03 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:14:04 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:04 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.105 - - [26/Dec/2025:09:14:04 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:05 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:05 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.105 - - [26/Dec/2025:09:14:06 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.232.155 - - [26/Dec/2025:10:03:32 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 162.159.113.110 - - [26/Dec/2025:12:19:07 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.94.172 - - [26/Dec/2025:14:31:49 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.41.26 - - [26/Dec/2025:14:35:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.22.122 - - [26/Dec/2025:14:38:26 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.64.217.152 - - [26/Dec/2025:15:14:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:49 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:49 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:49 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:50 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:50 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:50 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:50 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:51 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:51 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:51 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:51 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:52 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:52 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:52 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:53 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:53 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:53 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:53 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:54 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:54 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:54 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:54 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:55 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:55 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.54 - - [26/Dec/2025:15:29:55 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:55 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:56 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:56 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:56 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:56 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:57 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:57 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:57 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:58 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:58 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:58 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:58 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:59 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:29:59 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:59 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:29:59 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:00 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:00 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:00 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:00 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:01 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:01 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:01 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:01 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:02 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:02 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:02 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:02 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:03 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:03 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:03 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:04 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:04 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:04 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:04 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:05 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:05 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:05 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:05 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:06 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:06 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:06 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:06 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:07 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:07 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:07 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:07 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:08 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:08 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:08 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:08 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:09 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:09 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:09 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:10 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:10 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:10 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:10 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:11 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:11 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:11 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:11 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:12 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:12 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:12 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:12 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:13 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:13 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:13 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:14 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:14 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:14 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:14 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:15 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:15 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:15 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:15 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:16 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:16 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:16 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.54 - - [26/Dec/2025:15:30:16 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:17 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:17 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:17 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:17 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:18 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:18 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:18 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:18 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:19 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:19 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:19 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:20 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:20 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:20 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:20 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [26/Dec/2025:15:30:21 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:21 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:21 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:21 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:22 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:22 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [26/Dec/2025:15:30:22 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [26/Dec/2025:18:35:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.68.242.4 - - [26/Dec/2025:18:35:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.88.110 - - [26/Dec/2025:18:35:50 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 162.158.107.3 - - [26/Dec/2025:18:35:51 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.107.3 - - [26/Dec/2025:18:35:51 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.106.220 - - [26/Dec/2025:18:35:52 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.106.220 - - [26/Dec/2025:18:35:53 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.106.220 - - [26/Dec/2025:18:35:53 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.106.220 - - [26/Dec/2025:18:35:54 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 162.158.107.3 - - [26/Dec/2025:18:35:54 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.107.3 - - [26/Dec/2025:18:35:55 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.71.144.21 - - [26/Dec/2025:18:43:39 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.195.107 - - [26/Dec/2025:19:21:53 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.209.187 - - [26/Dec/2025:19:21:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.221.138 - - [26/Dec/2025:20:33:33 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.221.138 - - [26/Dec/2025:20:34:11 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.69.151.200 - - [26/Dec/2025:21:12:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.111.50 - - [26/Dec/2025:21:12:41 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.172.86 - - [26/Dec/2025:21:14:45 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.148.122 - - [26/Dec/2025:21:14:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.68.35.143 - - [26/Dec/2025:21:51:53 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.35.69 - - [26/Dec/2025:21:51:53 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.68.35.69 - - [26/Dec/2025:21:51:53 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.68.35.69 - - [26/Dec/2025:21:51:53 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.68.35.69 - - [26/Dec/2025:21:51:53 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.68.35.69 - - [26/Dec/2025:21:51:53 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.35.69 - - [26/Dec/2025:21:51:53 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 104.23.221.199 - - [26/Dec/2025:22:26:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.143.187 - - [26/Dec/2025:22:27:08 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 141.101.84.94 - - [26/Dec/2025:22:57:46 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:46 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:47 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:47 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:48 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:48 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:48 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:49 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:49 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:49 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:50 +0100] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:50 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:50 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:51 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:51 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:51 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:52 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:52 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:52 +0100] "GET /wp-includes/random_compat/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:53 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:53 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:53 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:54 +0100] "GET /wp-includes/Text/Diff/Engine/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:54 +0100] "GET /wp-includes/assets/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:54 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:54 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:55 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:55 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:55 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:56 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:56 +0100] "GET /wp-includes/Text/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:56 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:57 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:57 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:57 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:58 +0100] "GET /images/images/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:58 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:58 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:59 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:59 +0100] "GET /wp-includes/bk/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:57:59 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:00 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:00 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:00 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:01 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:01 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:01 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:02 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:02 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:02 +0100] "GET /wp-includes/js/tinymce/plugins/colorpicker/wp-login.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:03 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:03 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:03 +0100] "GET /wp-admin/css/colors/blue/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:04 +0100] "GET /wp-admin/css/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:04 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:04 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:05 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:05 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:05 +0100] "GET /wp-admin/product.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:06 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:06 +0100] "GET /wp-includes/customize/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:06 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:07 +0100] "GET /wp-includes/block-bindings/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:07 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:07 +0100] "GET /async-upload.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:08 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:08 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:08 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:09 +0100] "GET /wp-includes/block-supports/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:09 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:09 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:10 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:10 +0100] "GET /.tmb/wp-login.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:10 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:11 +0100] "GET /wp-admin/network/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:11 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:11 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:12 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:12 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:12 +0100] "GET /wp-includes/images/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:13 +0100] "GET /wp-content/uploads/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:13 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:13 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:14 +0100] "GET /wp-admin/images/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:14 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:14 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:15 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:15 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:15 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:16 +0100] "GET /wp-includes/PHPMailer/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:16 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:16 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:17 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:17 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:17 +0100] "GET /fx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:17 +0100] "GET /assets/images/about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:18 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:18 +0100] "GET /db6d0/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:18 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:19 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:19 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:19 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:20 +0100] "GET /xmldoc/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:20 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:20 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:21 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:21 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:21 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:22 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:22 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:22 +0100] "GET /wp-content/themes/pridmag/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:23 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:23 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:23 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:24 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:24 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:24 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:25 +0100] "GET /admin.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:25 +0100] "GET /adminfuns.php?attempt=1 HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:25 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:26 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:26 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:26 +0100] "GET /wp-admin/css/colors/ocean/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:27 +0100] "GET /wp-content/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:27 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:27 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:28 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:28 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:28 +0100] "GET /wp-admin/classwithtostring.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:29 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:29 +0100] "GET /wp-content/uploads/wc-logs/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:29 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:30 +0100] "GET /wp-includes/fonts/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:30 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:30 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:31 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:31 +0100] "GET /uploads/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:31 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:32 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:32 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:32 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:33 +0100] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:33 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:33 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:34 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:34 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:34 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:35 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:35 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:35 +0100] "GET /wp-admin/includes/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:36 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:36 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:36 +0100] "GET //wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:37 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:37 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:37 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:37 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:38 +0100] "GET /wp-content/languages/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:38 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:38 +0100] "GET /alf.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:39 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:39 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:39 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:40 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:40 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:41 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:41 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:41 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:42 +0100] "GET /wp-admin/js/widgets/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:42 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:42 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:42 +0100] "GET /xxl.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:43 +0100] "GET /help.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:43 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:43 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:44 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:44 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:44 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:45 +0100] "GET /wp-includes/rest-api/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:45 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:45 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:46 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:46 +0100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:46 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:47 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:47 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:47 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:48 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:48 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:49 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:49 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:50 +0100] "GET /wp-includes/rest-api/fields/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:50 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:50 +0100] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:51 +0100] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:51 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:51 +0100] "GET /public/assets/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:52 +0100] "GET /termps.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:52 +0100] "GET /wp-includes/ID3/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:52 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:53 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:53 +0100] "GET /wp-admin/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:53 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:54 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:54 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:54 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:55 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:55 +0100] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:55 +0100] "GET /.well-known/alfacgiapi/getdir.alfa HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:56 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:56 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:56 +0100] "GET /wp-content/themes/vx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:56 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:57 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "-" "-" 141.101.84.94 - - [26/Dec/2025:22:58:57 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "-" 104.23.221.12 - - [27/Dec/2025:01:11:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 172.69.94.144 - - [27/Dec/2025:01:39:34 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:35 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:36 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:37 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:37 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:38 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:38 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.144 - - [27/Dec/2025:01:39:39 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:39 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.183.83 - - [27/Dec/2025:01:39:40 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:40 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:40 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:41 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.144 - - [27/Dec/2025:01:39:42 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.144 - - [27/Dec/2025:01:39:42 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:43 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:43 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:44 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:44 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:45 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:45 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:46 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:47 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:47 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:48 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:48 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:49 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:49 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:50 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:50 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:51 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:52 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:52 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:53 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:53 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:54 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:54 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:55 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:55 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:56 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:57 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:57 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:58 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:58 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:39:59 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:39:59 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:00 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:00 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:01 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:01 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:02 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:03 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:03 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:04 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:04 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:05 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:05 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:06 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:06 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:07 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:08 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:08 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:09 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:09 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:10 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:10 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:11 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:11 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:12 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:13 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:13 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:14 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:14 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:15 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:15 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:16 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:16 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:17 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:18 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:18 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:19 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:19 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:20 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:20 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:21 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:21 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:22 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:22 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:23 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:24 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:24 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:25 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:25 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:26 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:26 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:27 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:27 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:28 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:29 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:29 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:30 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:30 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:31 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:31 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:32 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:32 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:33 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:34 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:34 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:35 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:35 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:36 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:36 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:37 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:37 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:38 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:39 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:39 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:40 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:40 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:41 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:41 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:42 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:43 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:43 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:44 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:44 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.144 - - [27/Dec/2025:01:40:45 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.144 - - [27/Dec/2025:01:40:46 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.42.178 - - [27/Dec/2025:01:41:07 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.213.195 - - [27/Dec/2025:01:41:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.186.250 - - [27/Dec/2025:01:47:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.184.47 - - [27/Dec/2025:03:10:44 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.69.50.159 - - [27/Dec/2025:03:13:45 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.10.41 - - [27/Dec/2025:03:14:03 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.69.17.18 - - [27/Dec/2025:03:23:26 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.69.17.18 - - [27/Dec/2025:03:23:26 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.69.17.18 - - [27/Dec/2025:03:23:26 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.69.17.18 - - [27/Dec/2025:03:23:27 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.69.17.18 - - [27/Dec/2025:03:23:27 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.69.17.18 - - [27/Dec/2025:03:23:27 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.69.17.18 - - [27/Dec/2025:03:23:27 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 141.101.95.99 - - [27/Dec/2025:03:36:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 172.69.221.74 - - [27/Dec/2025:03:40:39 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.232.81 - - [27/Dec/2025:03:55:52 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.222.238 - - [27/Dec/2025:03:55:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.64.213.120 - - [27/Dec/2025:05:06:21 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:22 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:22 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:22 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:23 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:23 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:23 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [27/Dec/2025:05:06:23 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:24 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:24 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:24 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:24 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:25 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:25 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:25 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:25 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:26 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:26 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:26 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:26 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:27 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:27 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:27 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:27 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [27/Dec/2025:05:06:28 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:28 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:28 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:29 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:29 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:29 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:29 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:30 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:30 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:30 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:30 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:31 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [27/Dec/2025:05:06:31 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:31 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:31 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:32 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:32 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [27/Dec/2025:05:06:32 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:32 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:33 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:33 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:33 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:33 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:34 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:34 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:34 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:34 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:35 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:35 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:35 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:35 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:36 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:36 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:36 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:36 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:37 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:37 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:37 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:37 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:38 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:38 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:38 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:38 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:39 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:39 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:39 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:39 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:40 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:40 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:40 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [27/Dec/2025:05:06:40 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:41 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:41 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:41 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:41 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:42 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:42 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [27/Dec/2025:05:06:42 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:42 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:43 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:43 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:43 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:43 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:44 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:44 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:44 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:44 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:45 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:45 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:45 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [27/Dec/2025:05:06:45 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:46 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:46 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:46 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:46 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:47 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:47 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:47 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:47 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:48 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:48 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:48 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:48 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:49 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:49 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:49 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:49 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:50 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [27/Dec/2025:05:06:50 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [27/Dec/2025:05:06:50 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.159.238 - - [27/Dec/2025:07:48:19 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 OPR/35.0.2066.92" 172.68.159.238 - - [27/Dec/2025:07:48:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:70.0) Gecko/20190101 Firefox/70.0" 172.64.200.22 - - [27/Dec/2025:07:48:20 +0100] "GET /sendgrid.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.1 Safari/525.17" 162.158.182.167 - - [27/Dec/2025:07:48:20 +0100] "GET /twilio.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.57 Safari/537.17" 104.23.217.47 - - [27/Dec/2025:07:48:21 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; Sprint:SCH-i830; PPC; 240x320)" 172.64.200.22 - - [27/Dec/2025:07:48:21 +0100] "GET /phpinfo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" 104.23.217.47 - - [27/Dec/2025:07:48:22 +0100] "GET /dev/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36" 172.64.200.22 - - [27/Dec/2025:07:48:22 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SM-G930F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36" 104.23.221.13 - - [27/Dec/2025:07:48:22 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2b4) Gecko/20091124 Firefox/3.6b4" 104.23.221.13 - - [27/Dec/2025:07:48:23 +0100] "GET /laravel/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.37 (KHTML, like Gecko) Version/9.0 Safari/601.1.37" 104.23.223.111 - - [27/Dec/2025:07:48:25 +0100] "GET /.config.yaml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.132 Safari/537.36 OPR/21.0.1432.67 (Edition Campaign 47)" 104.23.221.13 - - [27/Dec/2025:07:48:25 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 6.0.1; Tablet; rv:57.0) Gecko/57.0 Firefox/57.0" 104.23.217.47 - - [27/Dec/2025:07:48:25 +0100] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; InfoPath.2)" 104.23.223.110 - - [27/Dec/2025:08:16:21 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.223.111 - - [27/Dec/2025:08:17:38 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.221.13 - - [27/Dec/2025:10:13:41 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.221.12 - - [27/Dec/2025:10:15:13 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.70.94.172 - - [27/Dec/2025:13:09:14 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.63.238 - - [27/Dec/2025:13:38:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.159.119.63 - - [27/Dec/2025:13:38:16 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:08 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:08 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:09 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:09 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:09 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:10 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.225.80 - - [27/Dec/2025:15:12:10 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:11 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:11 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:11 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:12 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:12 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:12 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:13 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.225.80 - - [27/Dec/2025:15:12:13 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:14 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:14 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:15 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:15 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:15 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:16 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:16 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:17 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:17 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:17 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:18 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:18 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:18 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:19 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:19 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:19 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:20 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:20 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:21 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:21 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:22 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:22 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:22 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:23 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:23 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:23 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:24 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:24 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.219.77 - - [27/Dec/2025:15:12:25 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:25 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:25 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:26 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:26 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.219.77 - - [27/Dec/2025:15:12:26 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:27 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:27 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:27 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:28 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:28 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:29 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:29 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:29 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:30 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:30 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:30 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:31 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:31 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.219.77 - - [27/Dec/2025:15:12:32 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:32 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:32 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:33 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.219.77 - - [27/Dec/2025:15:12:33 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:33 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.219.77 - - [27/Dec/2025:15:12:34 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:34 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:34 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:35 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:35 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:36 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:36 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:36 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:37 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:37 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:37 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:38 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:38 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:38 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:39 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:39 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:40 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:40 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:40 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:41 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:41 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:41 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:42 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:42 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:42 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:43 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:43 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:44 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:44 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.219.77 - - [27/Dec/2025:15:12:44 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:45 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:45 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:45 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:46 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.219.77 - - [27/Dec/2025:15:12:46 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:46 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:47 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:47 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:47 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:48 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:48 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:49 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:49 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:49 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:50 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.219.77 - - [27/Dec/2025:15:12:50 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:50 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:51 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:51 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:51 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:52 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.219.77 - - [27/Dec/2025:15:12:52 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:53 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:53 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:53 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:54 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:54 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.219.77 - - [27/Dec/2025:15:12:54 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.219.77 - - [27/Dec/2025:15:12:55 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:18:55 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.120 - - [27/Dec/2025:15:18:56 +0100] "GET /404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.120 - - [27/Dec/2025:15:18:57 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.120 - - [27/Dec/2025:15:18:57 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.120 - - [27/Dec/2025:15:18:57 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.120 - - [27/Dec/2025:15:18:58 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.120 - - [27/Dec/2025:15:18:58 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.120 - - [27/Dec/2025:15:18:59 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:18:59 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:18:59 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:00 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:00 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:01 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:01 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:01 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:02 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:02 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:03 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:03 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:03 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.176.90 - - [27/Dec/2025:15:19:04 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:04 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:05 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:05 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:06 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:06 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:06 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:07 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:07 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:08 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:08 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:09 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:09 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:10 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:10 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:10 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:11 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:11 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:12 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:12 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:13 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:13 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:13 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:14 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:14 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:15 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:15 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:16 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:16 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:17 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:17 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:17 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:18 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:18 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:19 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:19 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:20 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:20 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:21 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:21 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.176.90 - - [27/Dec/2025:15:19:21 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:22 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:23 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:23 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:23 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:24 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:24 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:25 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:25 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:26 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:26 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:26 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:27 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:27 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:28 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:28 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:29 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:29 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:29 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:30 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:30 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:31 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.176.90 - - [27/Dec/2025:15:19:31 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:32 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:32 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:32 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:33 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:33 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:34 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:34 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:35 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:35 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:35 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:36 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:36 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:37 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:37 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:38 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:38 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:38 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:39 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:39 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:40 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:40 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:41 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:41 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:41 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:42 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:42 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:43 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:43 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:44 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:44 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [27/Dec/2025:15:19:44 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.176.90 - - [27/Dec/2025:15:19:45 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.126.44 - - [27/Dec/2025:15:26:06 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.160.250 - - [27/Dec/2025:17:45:22 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.103.4 - - [27/Dec/2025:18:42:17 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.182.192 - - [27/Dec/2025:18:45:35 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.182.192 - - [27/Dec/2025:18:48:02 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.175.156 - - [27/Dec/2025:19:36:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 162.158.167.183 - - [27/Dec/2025:20:10:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.223.110 - - [27/Dec/2025:22:26:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.210.54 - - [27/Dec/2025:22:29:34 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.180 - - [27/Dec/2025:22:29:35 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.114.180 - - [27/Dec/2025:22:29:35 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.180 - - [27/Dec/2025:22:29:36 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.180 - - [27/Dec/2025:22:29:36 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.114.180 - - [27/Dec/2025:22:29:37 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.114.180 - - [27/Dec/2025:22:29:37 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.114.180 - - [27/Dec/2025:22:29:37 +0100] "GET /admin/controller/extension/extension/jnweppgp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:38 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:38 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:38 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:39 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:39 +0100] "GET /css/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:39 +0100] "GET /db.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:40 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:40 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:40 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:41 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:41 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:41 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:42 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:42 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:43 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:43 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.210.54 - - [27/Dec/2025:22:29:43 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:44 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:44 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:44 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:45 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:45 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:46 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:46 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:46 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:47 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:47 +0100] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:47 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:48 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:48 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:48 +0100] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:49 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:49 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:49 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:50 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:50 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.210.54 - - [27/Dec/2025:22:29:50 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:51 +0100] "GET /wp-fclass.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:51 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:52 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:52 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:52 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:53 +0100] "GET /wp-includes/Requests/src/Cookie/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.210.54 - - [27/Dec/2025:22:29:53 +0100] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:53 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:54 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:54 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:54 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:55 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:55 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:55 +0100] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:56 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.210.54 - - [27/Dec/2025:22:29:56 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:56 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:57 +0100] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:57 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.210.54 - - [27/Dec/2025:22:29:58 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.210.54 - - [27/Dec/2025:22:29:58 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.248.60 - - [28/Dec/2025:00:45:34 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.176.36 - - [28/Dec/2025:01:14:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.198.172 - - [28/Dec/2025:03:42:07 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:08 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:09 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:10 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:10 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:11 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:11 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:12 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:12 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:13 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:14 +0100] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:14 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:15 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:15 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:16 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:16 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:17 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:17 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:18 +0100] "GET /wp-includes/random_compat/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:19 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:19 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:20 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:20 +0100] "GET /wp-includes/Text/Diff/Engine/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:21 +0100] "GET /wp-includes/assets/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:21 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:22 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:22 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:23 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:23 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:24 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:24 +0100] "GET /wp-includes/Text/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:25 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:26 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:26 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:27 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:27 +0100] "GET /images/images/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:28 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:28 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:29 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:29 +0100] "GET /wp-includes/bk/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:30 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:31 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:31 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:32 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:32 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:33 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:33 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:34 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:34 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:35 +0100] "GET /wp-includes/js/tinymce/plugins/colorpicker/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:35 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:36 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:37 +0100] "GET /wp-admin/css/colors/blue/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:37 +0100] "GET /wp-admin/css/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:38 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:38 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:39 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:39 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:40 +0100] "GET /wp-admin/product.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:40 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:41 +0100] "GET /wp-includes/customize/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:41 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:42 +0100] "GET /wp-includes/block-bindings/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:43 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:43 +0100] "GET /async-upload.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:44 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:44 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:45 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:45 +0100] "GET /wp-includes/block-supports/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:46 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:46 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:47 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:47 +0100] "GET /.tmb/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:48 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:49 +0100] "GET /wp-admin/network/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:49 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:50 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:50 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:51 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:51 +0100] "GET /wp-includes/images/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:52 +0100] "GET /wp-content/uploads/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:52 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:53 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:54 +0100] "GET /wp-admin/images/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:54 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:55 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:55 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:56 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:56 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:57 +0100] "GET /wp-includes/PHPMailer/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:57 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:58 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:59 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:42:59 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:00 +0100] "GET /fx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:00 +0100] "GET /assets/images/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:01 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:01 +0100] "GET /db6d0/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:02 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:02 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:03 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:03 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:04 +0100] "GET /xmldoc/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:05 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:05 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:06 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:06 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:07 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:07 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:08 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:08 +0100] "GET /wp-content/themes/pridmag/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:09 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:10 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:10 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:11 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:11 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:12 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:12 +0100] "GET /admin.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:13 +0100] "GET /adminfuns.php?attempt=1 HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:13 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:14 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:14 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:15 +0100] "GET /wp-admin/css/colors/ocean/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:15 +0100] "GET /wp-content/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:16 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:17 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:17 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:18 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:18 +0100] "GET /wp-admin/classwithtostring.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:19 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:19 +0100] "GET /wp-content/uploads/wc-logs/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:20 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:20 +0100] "GET /wp-includes/fonts/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:21 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:22 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:22 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:23 +0100] "GET /uploads/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:23 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:24 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:24 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:25 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:25 +0100] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:26 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:26 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:27 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:27 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:28 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:29 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:29 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:30 +0100] "GET /wp-admin/includes/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:30 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:31 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:31 +0100] "GET //wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:32 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:32 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:33 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:34 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:34 +0100] "GET /wp-content/languages/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:35 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:35 +0100] "GET /alf.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:36 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:36 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:37 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:38 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:38 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:39 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:39 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:40 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:40 +0100] "GET /wp-admin/js/widgets/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:41 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:41 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:42 +0100] "GET /xxl.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:43 +0100] "GET /help.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:43 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:44 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:44 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:45 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:45 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:46 +0100] "GET /wp-includes/rest-api/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:46 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:47 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:47 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:48 +0100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:49 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:49 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:50 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:50 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:51 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:51 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:52 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:52 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:53 +0100] "GET /wp-includes/rest-api/fields/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:53 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:54 +0100] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:55 +0100] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:55 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:56 +0100] "GET /public/assets/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:56 +0100] "GET /termps.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:57 +0100] "GET /wp-includes/ID3/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:57 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:58 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:58 +0100] "GET /wp-admin/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:59 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:43:59 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:00 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:01 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:01 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:02 +0100] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:02 +0100] "GET /.well-known/alfacgiapi/getdir.alfa HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:03 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:03 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:04 +0100] "GET /wp-content/themes/vx.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:04 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:05 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "-" "-" 172.71.198.172 - - [28/Dec/2025:03:44:06 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "-" 172.71.184.47 - - [28/Dec/2025:03:55:25 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.10.40 - - [28/Dec/2025:03:56:07 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:56:50 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:51 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:52 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:52 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:53 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:53 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.143.206 - - [28/Dec/2025:06:56:54 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:54 +0100] "GET /admin/controller/extension/extension/jnweppgp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:54 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:55 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:55 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.143.206 - - [28/Dec/2025:06:56:56 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:56 +0100] "GET /css/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.143.206 - - [28/Dec/2025:06:56:56 +0100] "GET /db.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.143.206 - - [28/Dec/2025:06:56:57 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.143.206 - - [28/Dec/2025:06:56:57 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:58 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.143.206 - - [28/Dec/2025:06:56:58 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.143.206 - - [28/Dec/2025:06:56:58 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [28/Dec/2025:06:56:59 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:56:59 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:00 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:01 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:01 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:01 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:02 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:02 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:03 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:03 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:03 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:04 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:04 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:05 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:05 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:05 +0100] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:06 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:06 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:07 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:07 +0100] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:07 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:08 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:08 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [28/Dec/2025:06:57:09 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:09 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:09 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:10 +0100] "GET /wp-fclass.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:10 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:11 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:11 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:11 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:12 +0100] "GET /wp-includes/Requests/src/Cookie/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:12 +0100] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:13 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [28/Dec/2025:06:57:13 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:13 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:14 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:14 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:15 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [28/Dec/2025:06:57:15 +0100] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:16 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:16 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:16 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [28/Dec/2025:06:57:17 +0100] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:17 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [28/Dec/2025:06:57:18 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [28/Dec/2025:06:57:18 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.42.179 - - [28/Dec/2025:10:12:25 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.79.16 - - [28/Dec/2025:10:12:25 +0100] "GET /images/pronat/MonMay711525820184930.jpg HTTP/1.1" 301 162 "-" "Googlebot-Image/1.0" 162.158.90.185 - - [28/Dec/2025:10:47:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.221.13 - - [28/Dec/2025:12:04:12 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.223.111 - - [28/Dec/2025:12:05:32 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.69.23.154 - - [28/Dec/2025:13:29:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.42.178 - - [28/Dec/2025:14:05:36 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.39.104 - - [28/Dec/2025:14:05:36 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.175.111 - - [28/Dec/2025:14:30:19 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:22 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:22 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:23 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:24 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:25 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:25 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:25 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:26 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:26 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:27 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:27 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:28 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:28 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:28 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:29 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:29 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:30 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:30 +0100] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:31 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:31 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:32 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:32 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:33 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:33 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:34 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:35 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:36 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:36 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:36 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:37 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:37 +0100] "GET /public/admin.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:38 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:38 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:38 +0100] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:39 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:39 +0100] "GET /wp-content/shell20211028.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:40 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:40 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:41 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:41 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:42 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:42 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:43 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:43 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:44 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:44 +0100] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:45 +0100] "GET /wp-admin/dropdown.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:45 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:46 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:46 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:47 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:47 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:48 +0100] "GET /sidwso.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:48 +0100] "GET /wp-admin/user/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:49 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:49 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:50 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:50 +0100] "GET /shell20211028.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:51 +0100] "GET /wp-includes/bak.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:51 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:52 +0100] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:52 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:53 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:53 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:54 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:54 +0100] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:55 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:55 +0100] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:56 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:56 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:57 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:57 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:58 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:58 +0100] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:59 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:30:59 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:00 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:00 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:01 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:01 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:02 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:02 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:03 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:03 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:03 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:04 +0100] "GET /wp-content/plugins/pwnd/dropdown.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:04 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:05 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:05 +0100] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:05 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:06 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:07 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:07 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:08 +0100] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:08 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:09 +0100] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:09 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:09 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:10 +0100] "GET /wp-includes/wp-load.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:10 +0100] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:11 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:11 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:12 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:12 +0100] "GET /priv.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:12 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:13 +0100] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:13 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:14 +0100] "GET /wp-admin/404.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:14 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:15 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:15 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:16 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:16 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:17 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:17 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:17 +0100] "GET /wp-includes/widgets/themes.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:18 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:18 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:19 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:19 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:19 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:20 +0100] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:20 +0100] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:21 +0100] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:21 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:22 +0100] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:22 +0100] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:22 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:23 +0100] "GET /sidwsi.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:23 +0100] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:24 +0100] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:24 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:25 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:25 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:26 +0100] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:26 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:27 +0100] "GET /max.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:27 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:28 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:29 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:29 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:29 +0100] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:30 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:30 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:31 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:31 +0100] "GET /wp-includes/images/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:32 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:32 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:33 +0100] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:33 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:34 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:34 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:35 +0100] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:35 +0100] "GET /fw.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:36 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "-" 104.23.175.111 - - [28/Dec/2025:14:31:36 +0100] "GET /.well-known/cong.php HTTP/1.1" 301 162 "-" "-" 172.71.182.7 - - [28/Dec/2025:15:14:08 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.164.111 - - [28/Dec/2025:15:51:46 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.229.112 - - [28/Dec/2025:15:52:11 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.108.91 - - [28/Dec/2025:15:59:52 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.122 - - [28/Dec/2025:15:59:53 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.108.122 - - [28/Dec/2025:15:59:53 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.108.122 - - [28/Dec/2025:15:59:53 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.122 - - [28/Dec/2025:15:59:54 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:15:59:56 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.108.91 - - [28/Dec/2025:15:59:57 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:15:59:57 +0100] "GET /admin/controller/extension/extension/jnweppgp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:15:59:58 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:15:59:59 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:15:59:59 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:00 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:00 +0100] "GET /css/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:01 +0100] "GET /db.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.108.91 - - [28/Dec/2025:16:00:01 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:01 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:02 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:02 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.108.91 - - [28/Dec/2025:16:00:03 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:03 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:04 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:05 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:06 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:06 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:07 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:07 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:08 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:09 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:09 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:10 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:11 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:11 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:12 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:12 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:13 +0100] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.108.91 - - [28/Dec/2025:16:00:13 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:13 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:14 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:15 +0100] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:15 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:16 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:17 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:19 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:19 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:19 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.108.91 - - [28/Dec/2025:16:00:20 +0100] "GET /wp-fclass.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:20 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:21 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:21 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:21 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:22 +0100] "GET /wp-includes/Requests/src/Cookie/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:22 +0100] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:23 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:23 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:23 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:24 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:24 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:25 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:25 +0100] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:26 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:26 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:27 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:27 +0100] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:28 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.91 - - [28/Dec/2025:16:00:28 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.91 - - [28/Dec/2025:16:00:28 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.89.197 - - [28/Dec/2025:16:09:45 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.89.197 - - [28/Dec/2025:16:09:46 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.238.246 - - [28/Dec/2025:16:36:17 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.80.9 - - [28/Dec/2025:17:10:58 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.70.50.25 - - [28/Dec/2025:17:10:59 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.70.50.25 - - [28/Dec/2025:17:10:59 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.70.50.25 - - [28/Dec/2025:17:10:59 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.70.50.25 - - [28/Dec/2025:17:10:59 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.70.50.25 - - [28/Dec/2025:17:11:00 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.70.50.25 - - [28/Dec/2025:17:11:00 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.68.35.144 - - [28/Dec/2025:19:59:25 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.35.70 - - [28/Dec/2025:19:59:26 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.68.35.70 - - [28/Dec/2025:19:59:26 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.35.70 - - [28/Dec/2025:19:59:26 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.35.70 - - [28/Dec/2025:19:59:26 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.35.70 - - [28/Dec/2025:19:59:26 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.35.70 - - [28/Dec/2025:19:59:26 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.71.134.113 - - [28/Dec/2025:20:30:43 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.225.192 - - [28/Dec/2025:20:30:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.184.47 - - [28/Dec/2025:21:15:00 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.71.184.47 - - [28/Dec/2025:21:15:58 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.70.233.55 - - [28/Dec/2025:21:38:33 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:34 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:34 +0100] "GET /.well-known/server.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:34 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:35 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:35 +0100] "GET /404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:35 +0100] "GET /96i.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:35 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:36 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:36 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:36 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:37 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:37 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:37 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:37 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:38 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:38 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:38 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:38 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:39 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:39 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:39 +0100] "GET /click.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:40 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:40 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:40 +0100] "GET /cord.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:40 +0100] "GET /core.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:41 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:41 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:41 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:41 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:42 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:42 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:42 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:43 +0100] "GET /images/nxc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:43 +0100] "GET /img/nxc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:43 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:43 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:44 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:44 +0100] "GET /log.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:44 +0100] "GET /lv.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:44 +0100] "GET /m.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:45 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:45 +0100] "GET /network_xo.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:45 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:46 +0100] "GET /nxc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:46 +0100] "GET /packed.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:46 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:46 +0100] "GET /rss.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:47 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:47 +0100] "GET /system_log.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:47 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [28/Dec/2025:21:38:47 +0100] "GET /upload/gpt-sh2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:48 +0100] "GET /we.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [28/Dec/2025:21:38:48 +0100] "GET /worksec.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.184.46 - - [28/Dec/2025:22:27:04 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.176.37 - - [28/Dec/2025:22:28:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.91.105 - - [28/Dec/2025:22:32:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.154.85 - - [28/Dec/2025:22:49:26 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.69.22.68 - - [28/Dec/2025:23:55:23 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 172.71.159.96 - - [29/Dec/2025:00:02:27 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 162.158.182.193 - - [29/Dec/2025:00:09:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 141.101.84.236 - - [29/Dec/2025:00:57:54 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.138 - - [29/Dec/2025:00:57:55 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.138 - - [29/Dec/2025:00:57:55 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.138 - - [29/Dec/2025:00:57:55 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.138 - - [29/Dec/2025:00:57:56 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.138 - - [29/Dec/2025:00:57:56 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.138 - - [29/Dec/2025:00:57:57 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.138 - - [29/Dec/2025:00:57:57 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.138 - - [29/Dec/2025:00:57:57 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:57:58 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:57:58 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:57:58 +0100] "GET /css/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:57:58 +0100] "GET /db.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [29/Dec/2025:00:57:59 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:57:59 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [29/Dec/2025:00:57:59 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:00 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:00 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:00 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:01 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:01 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:02 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:02 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:02 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:03 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:03 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:04 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:04 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:04 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:05 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:05 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:05 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:06 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:06 +0100] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:06 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:07 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:07 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:07 +0100] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:08 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:08 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:08 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:09 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:09 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:09 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:10 +0100] "GET /wp-fclass.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:10 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:10 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:11 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:11 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [29/Dec/2025:00:58:11 +0100] "GET /wp-includes/Requests/src/Cookie/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:12 +0100] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [29/Dec/2025:00:58:12 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:12 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:13 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:13 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:13 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:14 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:14 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:14 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:15 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:15 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:15 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:15 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [29/Dec/2025:00:58:16 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [29/Dec/2025:00:58:16 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.184.46 - - [29/Dec/2025:02:48:58 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.71.148.172 - - [29/Dec/2025:02:49:17 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.239.84 - - [29/Dec/2025:02:57:38 +0100] "GET /userfuns.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.71.124.48 - - [29/Dec/2025:04:12:51 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:52 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:53 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:53 +0100] "GET /aaa.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:53 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:54 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:54 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:55 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:55 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:55 +0100] "GET /auth.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:56 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:56 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:57 +0100] "GET /contents.php/lv.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:57 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:57 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:58 +0100] "GET /en-us/2021/04/30/php-community-sidesteps-its-third-supply-chain-attack-in-three-years/ HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:58 +0100] "GET /en/wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 172.71.124.34 - - [29/Dec/2025:04:12:59 +0100] "GET /favicon.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:12:59 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:00 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:00 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:00 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:01 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:01 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:02 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:02 +0100] "GET /man.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:03 +0100] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:03 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:03 +0100] "GET /private/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:04 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:04 +0100] "GET /shellv3.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:05 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:05 +0100] "GET /system.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:06 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:06 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:06 +0100] "GET /wp-activat.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:07 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:07 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:08 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:08 +0100] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:08 +0100] "GET /wp-admin/maint/edit.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:09 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:09 +0100] "GET /wp-conf.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:10 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:10 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:11 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:11 +0100] "GET /wp-content/themes/404.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:11 +0100] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:12 +0100] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:12 +0100] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:13 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:13 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:14 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:14 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:14 +0100] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:15 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:15 +0100] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:16 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:16 +0100] "GET /wp-includes/header.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:16 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:17 +0100] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:17 +0100] "GET /wp-includes/mani.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:18 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:18 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:19 +0100] "GET /wp-logs.php HTTP/1.1" 301 162 "-" "-" 172.71.124.48 - - [29/Dec/2025:04:13:19 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 172.69.178.183 - - [29/Dec/2025:04:14:21 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:22 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:23 +0100] "GET /.well-known/server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:24 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:24 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:25 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:25 +0100] "GET /96i.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:26 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:27 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:27 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:28 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:28 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:29 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:29 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:30 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:30 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:31 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:32 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:32 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:33 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:33 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:34 +0100] "GET /click.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:34 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:35 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:35 +0100] "GET /cord.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.183 - - [29/Dec/2025:04:14:36 +0100] "GET /core.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:36 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:37 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:38 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:38 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:39 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:39 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:40 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:40 +0100] "GET /images/nxc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:41 +0100] "GET /img/nxc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:41 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:42 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:43 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:43 +0100] "GET /log.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:44 +0100] "GET /lv.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:44 +0100] "GET /m.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:45 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:45 +0100] "GET /network_xo.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:46 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:46 +0100] "GET /nxc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.183 - - [29/Dec/2025:04:14:47 +0100] "GET /packed.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.183 - - [29/Dec/2025:04:14:47 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:48 +0100] "GET /rss.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:49 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:49 +0100] "GET /system_log.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:50 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:50 +0100] "GET /upload/gpt-sh2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:51 +0100] "GET /we.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.183 - - [29/Dec/2025:04:14:51 +0100] "GET /worksec.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:24:59 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:00 +0100] "GET /404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.58 - - [29/Dec/2025:05:25:01 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:01 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:01 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.58 - - [29/Dec/2025:05:25:02 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:02 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:02 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:03 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:03 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:03 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.58 - - [29/Dec/2025:05:25:04 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:04 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:04 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:05 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [29/Dec/2025:05:25:05 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:05 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:06 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:06 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:06 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:07 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:07 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:07 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:08 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:08 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:08 +0100] "GET /images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:09 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:09 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:09 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:10 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [29/Dec/2025:05:25:10 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:10 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:11 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:11 +0100] "GET /mini HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [29/Dec/2025:05:25:11 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:12 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:12 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:12 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:13 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:13 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:13 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:14 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:14 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:14 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:15 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:15 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:15 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:16 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:16 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [29/Dec/2025:05:25:16 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:17 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:17 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:17 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:18 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:18 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:18 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:19 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:19 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:19 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:20 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:20 +0100] "GET /wp-content/backups-dup-lite/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:20 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:21 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:21 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:21 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:22 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:22 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:22 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:23 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:23 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:23 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:24 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:24 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:24 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:25 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:25 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:25 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:26 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:26 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:26 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:27 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:27 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:27 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:28 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:28 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:28 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:29 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [29/Dec/2025:05:25:29 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:29 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [29/Dec/2025:05:25:30 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [29/Dec/2025:05:25:30 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:30 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:31 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:31 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:32 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:32 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:32 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:33 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:33 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:33 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:34 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:34 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:34 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:35 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [29/Dec/2025:05:25:35 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:35 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:36 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:36 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:36 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:37 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:37 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:37 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:38 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [29/Dec/2025:05:25:38 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [29/Dec/2025:05:25:38 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:46 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [29/Dec/2025:07:39:47 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.111.8 - - [29/Dec/2025:07:39:48 +0100] "GET /.well-known/server.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [29/Dec/2025:07:39:48 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [29/Dec/2025:07:39:48 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [29/Dec/2025:07:39:49 +0100] "GET /404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.111.8 - - [29/Dec/2025:07:39:49 +0100] "GET /96i.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.111.8 - - [29/Dec/2025:07:39:49 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [29/Dec/2025:07:39:50 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.111.8 - - [29/Dec/2025:07:39:50 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:50 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:51 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:51 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:51 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [29/Dec/2025:07:39:52 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:52 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:52 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:53 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:53 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:53 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:54 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [29/Dec/2025:07:39:54 +0100] "GET /click.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:54 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:55 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:55 +0100] "GET /cord.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:55 +0100] "GET /core.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:56 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:56 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:56 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:57 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:57 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:57 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:58 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:58 +0100] "GET /images/nxc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:58 +0100] "GET /img/nxc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:59 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:59 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:39:59 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:39:59 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:40:00 +0100] "GET /lv.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:40:00 +0100] "GET /m.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:40:00 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:40:01 +0100] "GET /network_xo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:40:01 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:40:01 +0100] "GET /nxc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:40:02 +0100] "GET /packed.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:40:02 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:40:02 +0100] "GET /rss.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:40:03 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:40:03 +0100] "GET /system_log.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:40:03 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:40:04 +0100] "GET /upload/gpt-sh2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [29/Dec/2025:07:40:04 +0100] "GET /we.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [29/Dec/2025:07:40:04 +0100] "GET /worksec.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.225.148 - - [29/Dec/2025:08:03:03 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:13 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.59 - - [29/Dec/2025:09:08:14 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "-" 172.68.210.59 - - [29/Dec/2025:09:08:14 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.59 - - [29/Dec/2025:09:08:14 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:15 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:15 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:16 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:16 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:16 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:17 +0100] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:17 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:17 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:18 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:18 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:18 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:19 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:19 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:19 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:20 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:20 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:20 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:21 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:21 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:21 +0100] "GET /wp-includes/Text/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:22 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:22 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:22 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:23 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:23 +0100] "GET /images/images/vx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:23 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:24 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:24 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:24 +0100] "GET /wp-includes/bk/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:25 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:25 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:25 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:26 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:26 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:26 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:27 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:27 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:27 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:28 +0100] "GET /wp-includes/js/tinymce/plugins/colorpicker/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:28 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:28 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:29 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:29 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:29 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:30 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:30 +0100] "GET /wp-admin/product.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:30 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:31 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:31 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:31 +0100] "GET /async-upload.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:32 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:32 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:32 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:33 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:33 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:33 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:34 +0100] "GET /.tmb/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:34 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:34 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:35 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:35 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:35 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:36 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:36 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:36 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:37 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:37 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:37 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:38 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:38 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:38 +0100] "GET /wp-includes/PHPMailer/vx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:39 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:39 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:39 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:40 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:40 +0100] "GET /fx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:40 +0100] "GET /assets/images/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:41 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:41 +0100] "GET /db6d0/vx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:41 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:42 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:42 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:42 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:43 +0100] "GET /xmldoc/vx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:43 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:43 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:44 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:44 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:44 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:45 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:45 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:45 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:46 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:46 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:46 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:47 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:47 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:47 +0100] "GET /admin.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:48 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:48 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:48 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:49 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:49 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:49 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:50 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:50 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:50 +0100] "GET /wp-admin/classwithtostring.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:51 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:51 +0100] "GET /wp-content/uploads/wc-logs/vx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:51 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:52 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:52 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:52 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:53 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:53 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:53 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:54 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:54 +0100] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:54 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:55 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:55 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:55 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:56 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:56 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:56 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:57 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:57 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:57 +0100] "GET //wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:58 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:58 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:58 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:59 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:59 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:08:59 +0100] "GET /alf.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:00 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:00 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:00 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:01 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:01 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:02 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:02 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:02 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:03 +0100] "GET /wp-admin/js/widgets/vx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:03 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:03 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:04 +0100] "GET /xxl.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:04 +0100] "GET /help.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:04 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:05 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:05 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:05 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:06 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:06 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:06 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:07 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:07 +0100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:07 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:08 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:08 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:08 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:09 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:09 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:09 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:10 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:10 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:10 +0100] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:11 +0100] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:11 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:11 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:12 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:12 +0100] "GET /wp-admin/vx.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:12 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:13 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:13 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:13 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:14 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:14 +0100] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:14 +0100] "GET /.well-known/alfacgiapi/getdir.alfa HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:15 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:15 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:15 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:16 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [29/Dec/2025:09:09:16 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "-" 162.159.120.250 - - [29/Dec/2025:09:21:35 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.23.238 - - [29/Dec/2025:09:24:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.23.223.111 - - [29/Dec/2025:10:03:24 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.70.247.95 - - [29/Dec/2025:10:04:35 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.251.194 - - [29/Dec/2025:10:33:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.167.57 - - [29/Dec/2025:10:51:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:11 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.9 - - [29/Dec/2025:11:04:13 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.9 - - [29/Dec/2025:11:04:14 +0100] "GET /.well-known/server.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.9 - - [29/Dec/2025:11:04:14 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:15 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:15 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:16 +0100] "GET /96i.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:17 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:17 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:18 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:18 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:19 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:19 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:20 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:20 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:21 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:21 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:22 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [29/Dec/2025:11:04:22 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:23 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:23 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:24 +0100] "GET /click.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:25 +0100] "GET /config.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:25 +0100] "GET /content.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:26 +0100] "GET /cord.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:26 +0100] "GET /core.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:27 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [29/Dec/2025:11:04:27 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:28 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:28 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:29 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:29 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:30 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:30 +0100] "GET /images/nxc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:31 +0100] "GET /img/nxc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:31 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [29/Dec/2025:11:04:32 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:33 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:33 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:34 +0100] "GET /lv.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [29/Dec/2025:11:04:34 +0100] "GET /m.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:35 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:35 +0100] "GET /network_xo.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:36 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:36 +0100] "GET /nxc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:37 +0100] "GET /packed.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:37 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:38 +0100] "GET /rss.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:38 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:39 +0100] "GET /system_log.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:39 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:40 +0100] "GET /upload/gpt-sh2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:41 +0100] "GET /we.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [29/Dec/2025:11:04:41 +0100] "GET /worksec.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.79 - - [29/Dec/2025:11:55:54 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:54 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:55 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:55 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:55 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:55 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:56 +0100] "GET /meta.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:56 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:56 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:57 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:57 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:57 +0100] "GET /yindu.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:57 +0100] "GET /wp-admin/class-db.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:58 +0100] "GET /baxa1.phP8 HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:58 +0100] "GET /baxa1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:58 +0100] "GET /.well-known//index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:58 +0100] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:59 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:59 +0100] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:59 +0100] "GET /wp-content/plugins//about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:55:59 +0100] "GET /wp-content/plugins//index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:00 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:00 +0100] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:00 +0100] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:00 +0100] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:01 +0100] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:01 +0100] "GET /wp-includes/css//index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:01 +0100] "GET /wp-includes/css//xc.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:01 +0100] "GET /wp-includes/images//about.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:02 +0100] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:02 +0100] "GET /wp//index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:02 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:02 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:03 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:03 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:03 +0100] "GET /cron.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:03 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:04 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:04 +0100] "GET /cookie.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:04 +0100] "GET /xleet.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:04 +0100] "GET /spip.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:05 +0100] "GET /22.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:05 +0100] "GET /room.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:05 +0100] "GET /disagreed.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:05 +0100] "GET /text.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:06 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:06 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:06 +0100] "GET /feeds.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:07 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:07 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:07 +0100] "GET /defaults.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:07 +0100] "GET /system.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:08 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:08 +0100] "GET /xmlrpc.php0 HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:08 +0100] "GET /colors.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:08 +0100] "GET /updates.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:09 +0100] "GET /alfa-rex1.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:09 +0100] "GET /wp-index.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:09 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:09 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:10 +0100] "GET /alfanew.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:10 +0100] "GET /locale.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:10 +0100] "GET /wxo.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:10 +0100] "GET /colour.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:11 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:11 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:11 +0100] "GET /wp-contentt.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:11 +0100] "GET /config.php7 HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:12 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:12 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:12 +0100] "GET /block-bindings.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:12 +0100] "GET /class_api.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:13 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:13 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:13 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:13 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:14 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:14 +0100] "GET /cloud.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:14 +0100] "GET /configs.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:14 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:15 +0100] "GET /update.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:15 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:15 +0100] "GET /input.php HTTP/1.1" 301 162 "-" "-" 172.71.8.79 - - [29/Dec/2025:11:56:15 +0100] "GET /aaa.php HTTP/1.1" 301 162 "-" "-" 162.158.103.200 - - [29/Dec/2025:12:15:22 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.94.173 - - [29/Dec/2025:12:20:08 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 141.101.95.74 - - [29/Dec/2025:13:18:52 +0100] "GET /media/system/js/core.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.225.16 - - [29/Dec/2025:13:18:56 +0100] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:09 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:10 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:10 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:11 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:11 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:11 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:12 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:12 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:12 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:13 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:13 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:13 +0100] "GET /css/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:14 +0100] "GET /db.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:14 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:14 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:14 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:15 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:15 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:15 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:16 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:16 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:17 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:17 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:17 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:18 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:18 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:18 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:19 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:19 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:19 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:20 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:20 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:20 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:21 +0100] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php7 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:21 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:21 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:22 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:22 +0100] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:22 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:23 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:23 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:23 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:24 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:24 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:24 +0100] "GET /wp-fclass.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:25 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:25 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:25 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:26 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:26 +0100] "GET /wp-includes/Requests/src/Cookie/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:26 +0100] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:27 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:27 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:27 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:28 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:28 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:28 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:29 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:29 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:29 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:30 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:30 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [29/Dec/2025:14:37:30 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [29/Dec/2025:14:37:31 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [29/Dec/2025:14:37:31 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [29/Dec/2025:15:16:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.69.86.229 - - [29/Dec/2025:15:16:58 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.229.112 - - [29/Dec/2025:15:17:47 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.111.89 - - [29/Dec/2025:15:17:53 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.70.42.178 - - [29/Dec/2025:17:02:04 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.209.47 - - [29/Dec/2025:17:02:04 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.58.12 - - [29/Dec/2025:17:31:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 172.68.242.5 - - [29/Dec/2025:17:52:24 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:25 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:25 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:25 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:26 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:26 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [29/Dec/2025:17:52:27 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:27 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [29/Dec/2025:17:52:27 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:28 +0100] "GET /class.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:28 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [29/Dec/2025:17:52:29 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:29 +0100] "GET /num.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:30 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [29/Dec/2025:17:52:30 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:30 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [29/Dec/2025:17:52:31 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [29/Dec/2025:17:52:31 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [29/Dec/2025:17:52:32 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:32 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:33 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:34 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:35 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:35 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [29/Dec/2025:17:52:36 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [29/Dec/2025:17:52:37 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:38 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [29/Dec/2025:17:52:39 +0100] "GET /o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [29/Dec/2025:17:52:40 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:41 +0100] "GET /server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:41 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:42 +0100] "GET /wp-admin/includes HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:42 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:43 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:43 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:43 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [29/Dec/2025:17:52:44 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [29/Dec/2025:17:52:44 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:45 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [29/Dec/2025:17:52:45 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:45 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.5 - - [29/Dec/2025:17:52:46 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:46 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:47 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:47 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:48 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:48 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:49 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:49 +0100] "GET /wp-admin/s.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:49 +0100] "GET /wp-admin/w.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [29/Dec/2025:17:52:50 +0100] "GET /wp-admin/z.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.3.122 - - [29/Dec/2025:17:57:00 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.68.3.122 - - [29/Dec/2025:17:57:00 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.68.3.122 - - [29/Dec/2025:17:57:00 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.3.122 - - [29/Dec/2025:17:57:01 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.3.122 - - [29/Dec/2025:17:57:01 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.3.122 - - [29/Dec/2025:17:57:01 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.68.3.122 - - [29/Dec/2025:17:57:01 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 162.158.78.93 - - [29/Dec/2025:18:43:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.211.195 - - [29/Dec/2025:18:44:30 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.191.74 - - [29/Dec/2025:18:52:41 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.35.121 - - [29/Dec/2025:18:52:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.110.130 - - [29/Dec/2025:18:53:42 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.131.207 - - [29/Dec/2025:19:08:36 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.70.131.207 - - [29/Dec/2025:19:08:36 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.70.131.207 - - [29/Dec/2025:19:08:36 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.70.131.207 - - [29/Dec/2025:19:08:36 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.70.131.207 - - [29/Dec/2025:19:08:37 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.70.131.207 - - [29/Dec/2025:19:08:37 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.70.131.207 - - [29/Dec/2025:19:08:37 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.71.195.108 - - [29/Dec/2025:19:32:03 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.35.61 - - [29/Dec/2025:19:32:04 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.209.130 - - [29/Dec/2025:19:32:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.213.151 - - [29/Dec/2025:19:32:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.60.152 - - [29/Dec/2025:20:28:47 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:48 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:48 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:49 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:49 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:28:49 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:50 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:28:50 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:50 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [29/Dec/2025:20:28:51 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [29/Dec/2025:20:28:51 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:51 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:52 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:52 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:53 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:53 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:53 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:54 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:54 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:54 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:28:55 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:28:55 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:55 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:28:56 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:28:56 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:56 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:57 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:57 +0100] "GET /o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:57 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:58 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:58 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:28:58 +0100] "GET /wp-admin/includes HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:59 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:59 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:28:59 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [29/Dec/2025:20:29:00 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:00 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:00 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:29:01 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [29/Dec/2025:20:29:01 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:01 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:29:02 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:29:02 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:02 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:03 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:03 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:03 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [29/Dec/2025:20:29:04 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:04 +0100] "GET /wp-admin/s.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:04 +0100] "GET /wp-admin/w.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [29/Dec/2025:20:29:05 +0100] "GET /wp-admin/z.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.22.142 - - [29/Dec/2025:22:18:47 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.23.178 - - [29/Dec/2025:22:24:01 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.10.41 - - [29/Dec/2025:22:27:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.152 - - [29/Dec/2025:22:43:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 162.158.182.192 - - [29/Dec/2025:22:55:59 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.64.215.195 - - [29/Dec/2025:22:58:34 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.79 - - [29/Dec/2025:22:58:35 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:35 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:36 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:36 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:36 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:36 +0100] "GET /admin/upload/mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:37 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:37 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:37 +0100] "GET /alfav4.1-tesla.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:37 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:38 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:38 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:38 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:38 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:39 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:39 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:39 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:39 +0100] "GET /d.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.217.46 - - [29/Dec/2025:22:58:39 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.64.215.195 - - [29/Dec/2025:22:58:40 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:40 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:40 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:40 +0100] "GET /h.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:41 +0100] "GET /image/c.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:41 +0100] "GET /images/alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:41 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.195 - - [29/Dec/2025:22:58:41 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:42 +0100] "GET /images/xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:42 +0100] "GET /index2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:42 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.195 - - [29/Dec/2025:22:58:42 +0100] "GET /luuf.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:43 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:43 +0100] "GET /mm.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:43 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:43 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:44 +0100] "GET /phpmailer.lang-sv.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:44 +0100] "GET /s.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:44 +0100] "GET /sa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:44 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:45 +0100] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.215.195 - - [29/Dec/2025:22:58:45 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:45 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:45 +0100] "GET /up.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:46 +0100] "GET /uploaded_script.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:46 +0100] "GET /vendor/composer/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:46 +0100] "GET /w.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:46 +0100] "GET /wp-admin/a.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:47 +0100] "GET /wp-admin/css/colors HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:47 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:47 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:47 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:48 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:48 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:48 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.215.195 - - [29/Dec/2025:22:58:48 +0100] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.215.195 - - [29/Dec/2025:22:58:49 +0100] "GET /wp-admin/k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.166.169 - - [30/Dec/2025:00:19:20 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.49.229 - - [30/Dec/2025:01:25:55 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:55 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:56 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:25:56 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:25:56 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:57 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:57 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:25:57 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:57 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:58 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:25:58 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:58 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:58 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:25:59 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:59 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:25:59 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:25:59 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:00 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:00 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:00 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:00 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:01 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:01 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:01 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:01 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:02 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:02 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:02 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:02 +0100] "GET /o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:03 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:03 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:03 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:03 +0100] "GET /wp-admin/includes HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:04 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:04 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:04 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:04 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:05 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:05 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:05 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:05 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:06 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:06 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:06 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:06 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:07 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:07 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:07 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:07 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:08 +0100] "GET /wp-admin/s.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.49.229 - - [30/Dec/2025:01:26:08 +0100] "GET /wp-admin/w.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.49.229 - - [30/Dec/2025:01:26:08 +0100] "GET /wp-admin/z.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.156 - - [30/Dec/2025:02:35:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.69.169.226 - - [30/Dec/2025:02:42:05 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [30/Dec/2025:02:42:06 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:06 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:06 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:07 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:07 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:07 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:07 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:08 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:08 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:08 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:08 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:09 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:09 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:09 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:09 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:10 +0100] "GET /wp-includes/rest-api/fields HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:10 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:10 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:11 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:11 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:11 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:11 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:12 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:12 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:12 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:12 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:13 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:13 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:13 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:13 +0100] "GET /wp-includes/images HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:14 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:14 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:14 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:14 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:15 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:15 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:15 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:15 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:16 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:16 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [30/Dec/2025:02:42:16 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [30/Dec/2025:02:42:16 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:17 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:17 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:17 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:17 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:18 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [30/Dec/2025:02:42:18 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:18 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:18 +0100] "GET /wp-content/backups-dup-lite HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:19 +0100] "GET /wp-content/languages HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:19 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:19 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:19 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [30/Dec/2025:02:42:20 +0100] "GET /wp-content/uploads/2025 HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:20 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:20 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:21 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:21 +0100] "GET /wp-includes/Text HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:21 +0100] "GET /wp-includes/Text/Diff/Engine HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:21 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:22 +0100] "GET /wp-includes/block-supports HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:22 +0100] "GET /wp-includes/blocks/code HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:22 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:22 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:23 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:23 +0100] "GET /wp-includes/js/dist/development/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:23 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:02:42:23 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:24 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:02:42:24 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:35 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:36 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:37 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:37 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:37 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:38 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:38 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:38 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:39 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:39 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:40 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:40 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:40 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:41 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:41 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:42 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:42 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:42 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:43 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:43 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:44 +0100] "GET /wp-includes/block-bindings HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:44 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:44 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:45 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:45 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:46 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:46 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:46 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:47 +0100] "GET /o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:47 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:47 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:48 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:48 +0100] "GET /wp-admin/includes HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:49 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:49 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:49 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:50 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:50 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:51 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:51 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:51 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:52 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:52 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:52 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:53 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:53 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:54 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:54 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [30/Dec/2025:03:57:54 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:55 +0100] "GET /wp-admin/s.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:55 +0100] "GET /wp-admin/w.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [30/Dec/2025:03:57:56 +0100] "GET /wp-admin/z.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.6 - - [30/Dec/2025:04:21:26 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.164.110 - - [30/Dec/2025:06:21:19 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.68.10.40 - - [30/Dec/2025:06:22:00 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:03 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [30/Dec/2025:06:29:04 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [30/Dec/2025:06:29:05 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [30/Dec/2025:06:29:05 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [30/Dec/2025:06:29:05 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [30/Dec/2025:06:29:05 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [30/Dec/2025:06:29:06 +0100] "GET /admin/upload/mini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:06 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:06 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:06 +0100] "GET /alfav4.1-tesla.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [30/Dec/2025:06:29:07 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:07 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:07 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:07 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:08 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:08 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [30/Dec/2025:06:29:08 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:09 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:09 +0100] "GET /d.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:09 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:09 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:10 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:10 +0100] "GET /h.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:10 +0100] "GET /image/c.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:10 +0100] "GET /images/alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:11 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:11 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [30/Dec/2025:06:29:11 +0100] "GET /images/xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:11 +0100] "GET /index2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:12 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:12 +0100] "GET /luuf.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:12 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:13 +0100] "GET /mm.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:13 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:13 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:13 +0100] "GET /phpmailer.lang-sv.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:14 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:14 +0100] "GET /sa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:14 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:14 +0100] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:15 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:15 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:15 +0100] "GET /up.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:15 +0100] "GET /uploaded_script.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:16 +0100] "GET /vendor/composer/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:16 +0100] "GET /w.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:16 +0100] "GET /wp-admin/a.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:16 +0100] "GET /wp-admin/css/colors HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:17 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:17 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:17 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:18 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:18 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [30/Dec/2025:06:29:18 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:18 +0100] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [30/Dec/2025:06:29:19 +0100] "GET /wp-admin/k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.94.173 - - [30/Dec/2025:10:52:37 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.124.49 - - [30/Dec/2025:10:55:20 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:21 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:22 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.124.34 - - [30/Dec/2025:10:55:22 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:23 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.34 - - [30/Dec/2025:10:55:23 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:24 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.34 - - [30/Dec/2025:10:55:24 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.34 - - [30/Dec/2025:10:55:24 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:25 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:25 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.34 - - [30/Dec/2025:10:55:26 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:26 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.124.34 - - [30/Dec/2025:10:55:26 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:27 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:27 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:28 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [30/Dec/2025:10:55:28 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:28 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:29 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:29 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:30 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:30 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [30/Dec/2025:10:55:30 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:31 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:31 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:32 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:32 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:33 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:33 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [30/Dec/2025:10:55:33 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:34 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [30/Dec/2025:10:55:34 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [30/Dec/2025:10:55:35 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [30/Dec/2025:10:55:35 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [30/Dec/2025:10:55:35 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:36 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [30/Dec/2025:10:55:36 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:37 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:37 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:37 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:38 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [30/Dec/2025:10:55:38 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:39 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [30/Dec/2025:10:55:39 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:39 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:40 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:40 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:41 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [30/Dec/2025:10:55:41 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.124.49 - - [30/Dec/2025:10:55:41 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.221.12 - - [30/Dec/2025:11:10:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 172.71.242.160 - - [30/Dec/2025:12:42:38 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [30/Dec/2025:12:42:39 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [30/Dec/2025:12:42:39 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [30/Dec/2025:12:42:39 +0100] "GET /403.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:40 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:40 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:40 +0100] "GET /admin/upload/mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:41 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:41 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:41 +0100] "GET /alfav4.1-tesla.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [30/Dec/2025:12:42:41 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:42 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:42 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:42 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [30/Dec/2025:12:42:42 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:43 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:43 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:43 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:44 +0100] "GET /d.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:44 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:44 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:44 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:45 +0100] "GET /h.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:45 +0100] "GET /image/c.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [30/Dec/2025:12:42:45 +0100] "GET /images/alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:45 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:46 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:46 +0100] "GET /images/xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [30/Dec/2025:12:42:46 +0100] "GET /index2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:47 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:47 +0100] "GET /luuf.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:47 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:47 +0100] "GET /mm.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:48 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:48 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:48 +0100] "GET /phpmailer.lang-sv.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:48 +0100] "GET /s.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:49 +0100] "GET /sa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:49 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:49 +0100] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:50 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:50 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:50 +0100] "GET /up.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:50 +0100] "GET /uploaded_script.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:51 +0100] "GET /vendor/composer/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:51 +0100] "GET /w.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:51 +0100] "GET /wp-admin/a.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:51 +0100] "GET /wp-admin/css/colors HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:52 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:52 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:52 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:53 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:53 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:53 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:12:42:53 +0100] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:12:42:54 +0100] "GET /wp-admin/k.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.22.20.234 - - [30/Dec/2025:15:07:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.23.223.111 - - [30/Dec/2025:15:27:35 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.223.111 - - [30/Dec/2025:15:28:38 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.243.27 - - [30/Dec/2025:15:35:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 108.162.216.174 - - [30/Dec/2025:15:57:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.71.147.173 - - [30/Dec/2025:17:29:26 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.223.111 - - [30/Dec/2025:19:31:31 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.217.46 - - [30/Dec/2025:19:32:39 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.232.68 - - [30/Dec/2025:19:37:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.68.23.161 - - [30/Dec/2025:19:47:47 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.68.23.72 - - [30/Dec/2025:19:47:48 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.23.72 - - [30/Dec/2025:19:47:48 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.23.72 - - [30/Dec/2025:19:47:48 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.68.23.72 - - [30/Dec/2025:19:47:48 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.68.23.72 - - [30/Dec/2025:19:47:48 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.68.23.72 - - [30/Dec/2025:19:47:48 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.71.232.81 - - [30/Dec/2025:20:38:56 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.123.67 - - [30/Dec/2025:20:38:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 108.162.249.115 - - [30/Dec/2025:21:26:09 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.206.130 - - [30/Dec/2025:21:26:54 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.70.206.130 - - [30/Dec/2025:21:26:54 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.70.206.130 - - [30/Dec/2025:21:26:54 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.70.206.130 - - [30/Dec/2025:21:26:54 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.70.206.130 - - [30/Dec/2025:21:26:54 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.70.206.130 - - [30/Dec/2025:21:26:54 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.70.206.130 - - [30/Dec/2025:21:26:54 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:19 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:19 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:19 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:20 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:20 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:20 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:20 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:21 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:21 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:21 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:21 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:22 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:22 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:22 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:22 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:23 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:23 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [30/Dec/2025:21:36:23 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:23 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:24 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:24 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:24 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:24 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:25 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:25 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:25 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:25 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:26 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:26 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:26 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:26 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:27 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:27 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:27 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:28 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [30/Dec/2025:21:36:28 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:28 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:28 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:29 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:29 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:29 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:29 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:30 +0100] "GET /help.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:30 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:30 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:30 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:31 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:31 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:31 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [30/Dec/2025:21:36:31 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:32 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:32 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:32 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:32 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:33 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:33 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:33 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [30/Dec/2025:21:36:33 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:34 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:34 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:34 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:35 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:35 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:35 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:35 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:36 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:36 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:36 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:36 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:37 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [30/Dec/2025:21:36:37 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [30/Dec/2025:21:36:37 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.184.206 - - [30/Dec/2025:22:28:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.64.198.197 - - [31/Dec/2025:00:55:53 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.68.10.40 - - [31/Dec/2025:01:07:29 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.10.41 - - [31/Dec/2025:01:09:08 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:22 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:23 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.164.36 - - [31/Dec/2025:03:00:23 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:23 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:24 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:24 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:25 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:25 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.164.36 - - [31/Dec/2025:03:00:25 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:26 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:26 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:27 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:27 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:27 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:28 +0100] "GET /num.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:28 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:29 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:29 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:29 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:30 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:30 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:31 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:31 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:31 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:32 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:32 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:32 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:33 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:33 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:34 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:34 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:34 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:35 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:35 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:36 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:36 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:36 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:37 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:37 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:38 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.164.36 - - [31/Dec/2025:03:00:38 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:38 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:39 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:39 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:40 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:40 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:40 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:41 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:41 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.164.36 - - [31/Dec/2025:03:00:42 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.36 - - [31/Dec/2025:03:00:42 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [31/Dec/2025:03:35:49 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.111.162 - - [31/Dec/2025:04:15:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.187.213 - - [31/Dec/2025:04:15:46 +0100] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.111.212 - - [31/Dec/2025:04:15:47 +0100] "GET /media/system/js/core.js HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.178.228 - - [31/Dec/2025:06:34:04 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.122 - - [31/Dec/2025:06:34:05 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.179.122 - - [31/Dec/2025:06:34:06 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.179.122 - - [31/Dec/2025:06:34:06 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.122 - - [31/Dec/2025:06:34:07 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:07 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:08 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:08 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:09 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:09 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:10 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:11 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:11 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:12 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:12 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:13 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:13 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:14 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.228 - - [31/Dec/2025:06:34:14 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:15 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:15 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:16 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:17 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:17 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:18 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:18 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:19 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:19 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:20 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:20 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:21 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:21 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:22 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:23 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:23 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:24 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:24 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:25 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:25 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:26 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:26 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:27 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:27 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:28 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:29 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:29 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:30 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.228 - - [31/Dec/2025:06:34:30 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:31 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:31 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.228 - - [31/Dec/2025:06:34:32 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.228 - - [31/Dec/2025:06:34:33 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:55:56 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.138 - - [31/Dec/2025:07:55:57 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:55:57 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:55:58 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:55:58 +0100] "GET /wp-content/a.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:55:58 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.138 - - [31/Dec/2025:07:55:59 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:55:59 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:55:59 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.138 - - [31/Dec/2025:07:55:59 +0100] "GET /wp-content/inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:00 +0100] "GET /wp-content/l.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:00 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:00 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:00 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:01 +0100] "GET /wp-content/plugins/akismet/akismet.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:01 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:01 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:01 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:02 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:02 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:02 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:02 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:03 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:03 +0100] "GET /wp-includes/4.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:03 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:03 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:04 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:04 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:04 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:04 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:05 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:05 +0100] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:05 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:05 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:06 +0100] "GET /wp-includes/gelay.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:06 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:06 +0100] "GET /wp-includes/images/media HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:06 +0100] "GET /wp-includes/js/dist/development HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:07 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:07 +0100] "GET /wp-includes/js/tinymce/plugins/compat3x/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:07 +0100] "GET /wp-includes/mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:07 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [31/Dec/2025:07:56:08 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:08 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:08 +0100] "GET /wp-video.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:08 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [31/Dec/2025:07:56:09 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.22.1.198 - - [31/Dec/2025:08:40:35 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.69.71.159 - - [31/Dec/2025:08:40:35 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.71.182.6 - - [31/Dec/2025:08:50:17 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.22.24.143 - - [31/Dec/2025:09:04:33 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 104.22.24.183 - - [31/Dec/2025:09:04:33 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.70.94.172 - - [31/Dec/2025:09:13:03 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.223.86 - - [31/Dec/2025:09:14:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.87.95 - - [31/Dec/2025:10:01:06 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.242.221 - - [31/Dec/2025:10:34:24 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.223.111 - - [31/Dec/2025:10:35:01 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.22.1.199 - - [31/Dec/2025:11:37:38 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.71.31.216 - - [31/Dec/2025:11:37:39 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 104.22.24.142 - - [31/Dec/2025:11:57:33 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 104.22.24.182 - - [31/Dec/2025:11:57:33 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.71.232.81 - - [31/Dec/2025:12:00:22 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.68.151.157 - - [31/Dec/2025:12:00:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.166.66 - - [31/Dec/2025:12:32:36 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [31/Dec/2025:12:32:37 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:37 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [31/Dec/2025:12:32:38 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:38 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:39 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:39 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.66 - - [31/Dec/2025:12:32:40 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:40 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:40 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:41 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:41 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:42 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:42 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:42 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:43 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:43 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:44 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:44 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:44 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:45 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:45 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:46 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:46 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:46 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:47 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:47 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:48 +0100] "GET /o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:48 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:48 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:49 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:49 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:50 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:50 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:50 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.66 - - [31/Dec/2025:12:32:51 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.207 - - [31/Dec/2025:12:32:51 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.143.207 - - [31/Dec/2025:12:32:52 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.207 - - [31/Dec/2025:12:32:52 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.143.207 - - [31/Dec/2025:12:32:53 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.207 - - [31/Dec/2025:12:32:53 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.143.207 - - [31/Dec/2025:12:32:53 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.143.207 - - [31/Dec/2025:12:32:54 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.207 - - [31/Dec/2025:12:32:54 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.207 - - [31/Dec/2025:12:32:55 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.143.207 - - [31/Dec/2025:12:32:55 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.143.207 - - [31/Dec/2025:12:32:55 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.207 - - [31/Dec/2025:12:32:56 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.143.207 - - [31/Dec/2025:12:32:56 +0100] "GET /wp-admin/s.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:56 +0100] "GET /wp-admin/w.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.66 - - [31/Dec/2025:12:32:57 +0100] "GET /wp-admin/z.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.22.20.235 - - [31/Dec/2025:14:59:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 162.158.167.130 - - [31/Dec/2025:14:59:02 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 104.23.223.111 - - [31/Dec/2025:15:35:36 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.223.111 - - [31/Dec/2025:15:36:25 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.198.173 - - [31/Dec/2025:16:17:17 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:19 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:19 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:20 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:21 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:22 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:22 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:23 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:23 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:24 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:25 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:25 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:26 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:26 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:27 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:27 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:28 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:28 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:29 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:29 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:30 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:31 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:31 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:32 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:32 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:33 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:33 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:34 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:34 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:35 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:35 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:36 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:37 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:37 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:38 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:38 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:39 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:39 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:40 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:40 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:41 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:41 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:42 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:42 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:43 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:44 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:44 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:45 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [31/Dec/2025:16:17:45 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [31/Dec/2025:16:17:46 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:08 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [31/Dec/2025:16:36:09 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [31/Dec/2025:16:36:10 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [31/Dec/2025:16:36:11 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.34 - - [31/Dec/2025:16:36:12 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.34 - - [31/Dec/2025:16:36:12 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:13 +0100] "GET /404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:13 +0100] "GET /a.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:13 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:14 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:14 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:15 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:15 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:16 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:16 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:16 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:17 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:17 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:18 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:18 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:19 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:19 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:19 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:20 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:20 +0100] "GET /c.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:21 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:21 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:21 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:22 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:22 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:23 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:23 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:24 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:24 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:24 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:25 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:25 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:26 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:26 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:27 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:27 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:28 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:28 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:29 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:30 +0100] "GET /index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:30 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:31 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:32 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:32 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:33 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:33 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:34 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:34 +0100] "GET /num.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:34 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.124.49 - - [31/Dec/2025:16:36:35 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:35 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:36 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:36 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:37 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:37 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:37 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:38 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:38 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:39 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:39 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:39 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:40 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:40 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:41 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.49 - - [31/Dec/2025:16:36:41 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:42 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.49 - - [31/Dec/2025:16:36:42 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:47 +0100] "GET /server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:48 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:48 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:49 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:49 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:50 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:50 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:50 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:51 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.143.206 - - [31/Dec/2025:17:08:51 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:52 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.143.206 - - [31/Dec/2025:17:08:52 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:53 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.143.206 - - [31/Dec/2025:17:08:53 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:08:54 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:08:54 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:08:54 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:55 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:55 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:56 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:56 +0100] "GET /php.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:08:56 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:57 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:57 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:58 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:58 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:59 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:08:59 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:08:59 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [31/Dec/2025:17:09:00 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:09:00 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:01 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:01 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:02 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:02 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:02 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:03 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:03 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:04 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:04 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:09:05 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:09:05 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:09:05 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [31/Dec/2025:17:09:06 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:06 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:07 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:09:07 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:08 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:09:08 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:09 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:10 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.67 - - [31/Dec/2025:17:09:11 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:11 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:12 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.67 - - [31/Dec/2025:17:09:13 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:09:14 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.67 - - [31/Dec/2025:17:09:14 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.241.112 - - [31/Dec/2025:18:39:03 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.195.107 - - [31/Dec/2025:21:48:31 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.191.23 - - [31/Dec/2025:21:48:31 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.151.199 - - [31/Dec/2025:22:10:52 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.240.161 - - [31/Dec/2025:22:10:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.23.221.12 - - [31/Dec/2025:22:27:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.241.113 - - [31/Dec/2025:22:33:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.172.86 - - [31/Dec/2025:22:47:32 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.144.21 - - [31/Dec/2025:22:47:33 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.23.43 - - [31/Dec/2025:23:05:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:00 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:01 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:03 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:03 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:04 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:05 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:05 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:06 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:07 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:07 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:08 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:08 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:09 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:10 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:11 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:11 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:12 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:13 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.153 - - [31/Dec/2025:23:10:14 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:15 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:15 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:16 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:17 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:18 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:18 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:19 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:20 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:20 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:21 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:22 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:23 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:23 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:24 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.153 - - [31/Dec/2025:23:10:25 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:25 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:26 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:27 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:27 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:28 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:29 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:30 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:30 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:31 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.153 - - [31/Dec/2025:23:10:32 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:32 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:33 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:34 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:34 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:35 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:36 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:36 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:37 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:38 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:38 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:39 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:40 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:40 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:41 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:42 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:42 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:43 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:44 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:44 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:45 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:46 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:47 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:47 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:48 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:49 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:50 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:50 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:51 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:52 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:52 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:53 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:54 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.153 - - [31/Dec/2025:23:10:54 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.153 - - [31/Dec/2025:23:10:55 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.153 - - [31/Dec/2025:23:10:55 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:06 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.58 - - [31/Dec/2025:23:16:07 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.58 - - [31/Dec/2025:23:16:07 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:08 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:08 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:08 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:09 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:09 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:09 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:10 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:10 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:10 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:11 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:11 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:11 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:12 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:12 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:12 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [31/Dec/2025:23:16:13 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:13 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:13 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:14 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:14 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:14 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:15 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:15 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:15 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [31/Dec/2025:23:16:16 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:16 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:16 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:17 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:17 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:17 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:18 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:18 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:18 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:19 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:19 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:19 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:20 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:20 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:20 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:21 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:21 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:21 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:22 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:22 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:22 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:23 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [31/Dec/2025:23:16:23 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [31/Dec/2025:23:16:23 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:51:54 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:51:56 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:51:56 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:51:56 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:05 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:52:06 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:11 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [01/Jan/2026:01:52:11 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:12 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:52:13 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:52:14 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:15 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:52:16 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:18 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:18 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [01/Jan/2026:01:52:19 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:21 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:24 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:53 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:53 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:52:53 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:52:55 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:52:55 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:59 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:52:59 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:01 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:02 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:03 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:05 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:05 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:05 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:06 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:06 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:07 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:07 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:08 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:08 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:09 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:10 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:11 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:11 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:12 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:12 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [01/Jan/2026:01:53:13 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:13 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:14 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:14 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:15 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:16 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.160 - - [01/Jan/2026:01:53:17 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.160 - - [01/Jan/2026:01:53:18 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.160 - - [01/Jan/2026:01:53:20 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.49 - - [01/Jan/2026:02:23:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.69.86.25 - - [01/Jan/2026:02:23:40 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://www.immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 104.23.203.149 - - [01/Jan/2026:02:32:47 +0100] "GET /contact.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.203.148 - - [01/Jan/2026:02:32:47 +0100] "GET /contact HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.92.156 - - [01/Jan/2026:04:43:18 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 108.162.226.191 - - [01/Jan/2026:04:43:19 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.223.5 - - [01/Jan/2026:05:00:40 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.224 - - [01/Jan/2026:05:00:40 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.224 - - [01/Jan/2026:05:00:41 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:41 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:41 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:42 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:42 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:42 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:42 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:43 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [01/Jan/2026:05:00:43 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:43 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:43 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:44 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:44 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:44 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:44 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:45 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:45 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:45 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:46 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:46 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:46 +0100] "GET /class.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:46 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:46 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:47 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:47 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:47 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:47 +0100] "GET /black.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:48 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:48 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:48 +0100] "GET /s.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:48 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:49 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:49 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:49 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:49 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:50 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:50 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:50 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:50 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:51 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:51 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:51 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:51 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:52 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:52 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:52 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:52 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:53 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:53 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:53 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:53 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:54 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:54 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:54 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:54 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:55 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:55 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:55 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:55 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:56 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:56 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:56 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [01/Jan/2026:05:00:56 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:57 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:57 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:57 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:57 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:58 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [01/Jan/2026:05:00:58 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:58 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:58 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:59 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:00:59 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:59 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:00:59 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:01:00 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [01/Jan/2026:05:01:00 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [01/Jan/2026:05:01:00 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:27 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:27 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:28 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:28 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:28 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:29 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:29 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:29 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:30 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:30 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:30 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:31 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:31 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:31 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:32 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:32 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:32 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:33 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:33 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:33 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:34 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:34 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:34 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:35 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:35 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:35 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:36 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:36 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:36 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:37 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:37 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:37 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:38 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:38 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:38 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:39 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:39 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [01/Jan/2026:05:34:39 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:40 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:40 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:40 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:41 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:41 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:41 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:42 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:42 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:42 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:43 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:43 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [01/Jan/2026:05:34:43 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [01/Jan/2026:05:34:44 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.27.173 - - [01/Jan/2026:07:06:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 172.70.94.172 - - [01/Jan/2026:07:37:45 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.223.110 - - [01/Jan/2026:09:07:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 172.69.169.227 - - [01/Jan/2026:10:53:07 +0100] "GET /server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [01/Jan/2026:10:53:07 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [01/Jan/2026:10:53:08 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [01/Jan/2026:10:53:08 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [01/Jan/2026:10:53:08 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [01/Jan/2026:10:53:08 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [01/Jan/2026:10:53:09 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [01/Jan/2026:10:53:09 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [01/Jan/2026:10:53:09 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [01/Jan/2026:10:53:09 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [01/Jan/2026:10:53:10 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [01/Jan/2026:10:53:10 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [01/Jan/2026:10:53:10 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [01/Jan/2026:10:53:10 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:11 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:11 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:11 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:11 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:12 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:12 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:12 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:13 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:13 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:13 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:13 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:14 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:14 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:14 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:14 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:15 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:15 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:15 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:16 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:16 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:16 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:16 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:17 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [01/Jan/2026:10:53:17 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [01/Jan/2026:10:53:17 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:17 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:18 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:18 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:18 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:18 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:19 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:19 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:19 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:20 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:20 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:20 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:20 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [01/Jan/2026:10:53:21 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:21 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:21 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:21 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:22 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:22 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:22 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:22 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:23 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:23 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:23 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:24 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:24 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:24 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:24 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:25 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:25 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [01/Jan/2026:10:53:25 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:25 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:26 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:26 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:26 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:26 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:27 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:27 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:27 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:28 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [01/Jan/2026:10:53:28 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [01/Jan/2026:10:53:28 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:27 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [01/Jan/2026:11:24:28 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:28 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:29 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:29 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [01/Jan/2026:11:24:30 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:30 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:31 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [01/Jan/2026:11:24:31 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [01/Jan/2026:11:24:31 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:32 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:32 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [01/Jan/2026:11:24:33 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:33 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:34 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:34 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.81.101 - - [01/Jan/2026:11:24:34 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [01/Jan/2026:11:24:35 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:35 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:36 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:36 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:36 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:37 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:37 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:38 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:38 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:39 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:39 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:39 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:40 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:40 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:41 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:41 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:41 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:42 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:42 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:43 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:43 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:44 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:44 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:44 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:45 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:45 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:46 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:46 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:46 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:47 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:47 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:48 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:48 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:11:24:48 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:11:24:49 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:20 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [01/Jan/2026:11:58:20 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:21 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:21 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:21 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:22 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:22 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:22 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:23 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:23 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:23 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:23 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:24 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:24 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [01/Jan/2026:11:58:24 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:24 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:25 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:25 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:25 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:25 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:26 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:26 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:26 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:27 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:27 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:27 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:27 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:28 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:28 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:28 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:28 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:29 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:29 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:29 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:29 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:30 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:30 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:30 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:30 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:31 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:31 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:31 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:32 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:32 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [01/Jan/2026:11:58:32 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [01/Jan/2026:11:58:32 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [01/Jan/2026:11:58:33 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:33 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:33 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [01/Jan/2026:11:58:33 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.134.113 - - [01/Jan/2026:12:12:34 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 141.101.96.60 - - [01/Jan/2026:12:12:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.221.12 - - [01/Jan/2026:12:13:49 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.223.111 - - [01/Jan/2026:12:16:08 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.64.200.98 - - [01/Jan/2026:16:46:08 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:03:30 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.96 - - [01/Jan/2026:17:03:34 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:03:36 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:03:40 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:03:42 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:03:43 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:03:44 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:03:46 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:03:47 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:03:49 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:03:50 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:03:51 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:03:53 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:03:54 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:03:56 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:03:57 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:03:58 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:00 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:01 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:03 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:04 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:06 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:07 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:09 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:13 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:17 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:19 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:20 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:22 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:23 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:24 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:26 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:27 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.110 - - [01/Jan/2026:17:04:28 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.110 - - [01/Jan/2026:17:04:30 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:32 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:33 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:34 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:36 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:38 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:41 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:42 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:44 +0100] "GET /updates.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:45 +0100] "GET /head.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:47 +0100] "GET /images/crystal/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:48 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:50 +0100] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:51 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:04:53 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:55 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 104.23.175.110 - - [01/Jan/2026:17:04:56 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:04:58 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:00 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:01 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:03 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:04 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:05 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:07 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:08 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:10 +0100] "GET /wp-content/uploads/phpinfo.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:11 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:12 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:14 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:15 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:16 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:17 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:19 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:20 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:21 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:23 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:24 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:26 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:27 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:29 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:30 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:31 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:36 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:37 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:39 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:41 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:42 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:44 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:46 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:47 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:49 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [01/Jan/2026:17:05:51 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:53 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.175.110 - - [01/Jan/2026:17:05:56 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.63.31 - - [01/Jan/2026:17:09:16 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.253.108 - - [01/Jan/2026:17:09:21 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.70.39.104 - - [01/Jan/2026:17:51:01 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.159.120.251 - - [01/Jan/2026:18:30:29 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.42.144 - - [01/Jan/2026:18:34:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.175.31 - - [01/Jan/2026:18:34:35 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FSL 7.0.6.01001)" 162.158.6.150 - - [01/Jan/2026:19:59:34 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:35 +0100] "GET /lisa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:35 +0100] "GET /000.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:35 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:36 +0100] "GET /bless14.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:36 +0100] "GET /ws35.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:36 +0100] "GET /87.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:37 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:37 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:37 +0100] "GET /acwfihfh.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:38 +0100] "GET /f8.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:38 +0100] "GET /bras.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:38 +0100] "GET /an8.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:39 +0100] "GET /esp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:39 +0100] "GET /21x.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:39 +0100] "GET /out.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:40 +0100] "GET /flower2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:40 +0100] "GET /family.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:40 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:41 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:41 +0100] "GET /asf.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:41 +0100] "GET /lanz.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:42 +0100] "GET /xeeex.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:42 +0100] "GET /tons.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:42 +0100] "GET /wpup.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:43 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:43 +0100] "GET /f2f.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:43 +0100] "GET /ths.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:44 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:44 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:44 +0100] "GET /d996699999.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:45 +0100] "GET /ierne.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:45 +0100] "GET /xde.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:45 +0100] "GET /1yade.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:46 +0100] "GET /gettest.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [01/Jan/2026:19:59:46 +0100] "GET /bjfl.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [01/Jan/2026:20:03:58 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [01/Jan/2026:20:03:59 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [01/Jan/2026:20:03:59 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.81.101 - - [01/Jan/2026:20:04:00 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:00 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:00 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:01 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:01 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:02 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:02 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:02 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:03 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:03 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:04 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:04 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:04 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:05 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:05 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:06 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:06 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:06 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.5 - - [01/Jan/2026:20:04:07 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:07 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:08 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:08 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:09 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:09 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:09 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:10 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.5 - - [01/Jan/2026:20:04:10 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:11 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:11 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:11 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:12 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:12 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:13 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:13 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:13 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:14 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:14 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:15 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:15 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:16 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:16 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:16 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:17 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:17 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:18 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:18 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:18 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [01/Jan/2026:20:04:19 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [01/Jan/2026:20:04:19 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.10.41 - - [01/Jan/2026:20:16:32 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.223.111 - - [01/Jan/2026:20:16:41 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.184.206 - - [01/Jan/2026:22:37:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.22.1.32 - - [01/Jan/2026:23:09:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.172.86 - - [01/Jan/2026:23:09:47 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "DomainStatsBot/1.0 (https://domainstats.com/pages/our-bot)" 104.23.239.84 - - [01/Jan/2026:23:09:48 +0100] "HEAD / HTTP/1.1" 301 0 "-" "DomainStatsBot/1.0 (https://domainstats.com/pages/our-bot)" 172.69.86.110 - - [02/Jan/2026:00:43:28 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:29 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:30 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:31 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:31 +0100] "GET /wp-content/inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:32 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:32 +0100] "GET /wp-content/l.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:33 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:33 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:34 +0100] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:35 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:35 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:36 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:36 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:37 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:37 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:38 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:38 +0100] "GET /wp-includes/4.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:39 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:39 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:40 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:41 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:41 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:42 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:42 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:43 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:43 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:44 +0100] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:44 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:45 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:45 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:46 +0100] "GET /wp-includes/gelay.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:47 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:47 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:48 +0100] "GET /wp-includes/js/tinymce/plugins/compat3x/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:48 +0100] "GET /wp-includes/mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:49 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:49 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:50 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.86.110 - - [02/Jan/2026:00:43:50 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:51 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:51 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:52 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:53 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.86.110 - - [02/Jan/2026:00:43:53 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:54 +0100] "GET /wsa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:54 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:55 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.86.110 - - [02/Jan/2026:00:43:55 +0100] "GET /zwso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:29:57 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [02/Jan/2026:01:29:57 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [02/Jan/2026:01:29:58 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [02/Jan/2026:01:29:58 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [02/Jan/2026:01:29:58 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [02/Jan/2026:01:29:59 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:29:59 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:29:59 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:00 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:00 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:00 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:01 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:01 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [02/Jan/2026:01:30:01 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:02 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:02 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [02/Jan/2026:01:30:02 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:03 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:03 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:03 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:04 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:04 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:05 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:05 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:05 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:06 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:06 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:06 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:07 +0100] "GET /config.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:07 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:07 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:08 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:08 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:08 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:09 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:09 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:09 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:10 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:10 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [02/Jan/2026:01:30:10 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:11 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:11 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:11 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:12 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:12 +0100] "GET /index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:12 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:13 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:13 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:13 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:14 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:14 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:14 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:15 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:15 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [02/Jan/2026:01:30:15 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:16 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:16 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:16 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:17 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:17 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:17 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:18 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:18 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:18 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:19 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:19 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:20 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:20 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:01:30:20 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:21 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:21 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:01:30:21 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [02/Jan/2026:01:58:15 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.221.136 - - [02/Jan/2026:02:00:24 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.175.32 - - [02/Jan/2026:02:45:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FSL 7.0.6.01001)" 172.69.60.153 - - [02/Jan/2026:02:50:30 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.60.223 - - [02/Jan/2026:02:50:32 +0100] "GET /mda.php HTTP/1.1" 301 162 "-" "-" 172.69.60.223 - - [02/Jan/2026:02:50:32 +0100] "GET /cheka.php HTTP/1.1" 301 162 "-" "-" 172.69.60.223 - - [02/Jan/2026:02:50:33 +0100] "GET /cabs.php HTTP/1.1" 301 162 "-" "-" 172.69.60.223 - - [02/Jan/2026:02:50:33 +0100] "GET /classgoto24.php HTTP/1.1" 301 162 "-" "-" 172.69.60.223 - - [02/Jan/2026:02:50:33 +0100] "GET /zsz.php HTTP/1.1" 301 162 "-" "-" 172.69.60.223 - - [02/Jan/2026:02:50:34 +0100] "GET /kaza.php HTTP/1.1" 301 162 "-" "-" 172.69.60.223 - - [02/Jan/2026:02:50:34 +0100] "GET /lites.php HTTP/1.1" 301 162 "-" "-" 172.69.60.223 - - [02/Jan/2026:02:50:35 +0100] "GET /bby.php HTTP/1.1" 301 162 "-" "-" 172.69.60.223 - - [02/Jan/2026:02:50:35 +0100] "GET /get.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:35 +0100] "GET /xtride.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:36 +0100] "GET /ws29.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:36 +0100] "GET /oo.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:37 +0100] "GET /s11.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:38 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:38 +0100] "GET /aqw.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:38 +0100] "GET /ca1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:39 +0100] "GET /file51.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:39 +0100] "GET /abouta.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:39 +0100] "GET /fclas.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:40 +0100] "GET /File.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:40 +0100] "GET /all.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:41 +0100] "GET /bbn.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:41 +0100] "GET /berlin.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:41 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:42 +0100] "GET /xz89.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:42 +0100] "GET /thai.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:42 +0100] "GET /lopst.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:43 +0100] "GET /wft.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:43 +0100] "GET /ws28.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:43 +0100] "GET /wsvvs.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:44 +0100] "GET /vbbn.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:44 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:45 +0100] "GET /fz.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:45 +0100] "GET /sang.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:45 +0100] "GET /0o0.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:46 +0100] "GET /zxl.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:46 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:46 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:47 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:47 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:47 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:48 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:48 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:49 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:49 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:49 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:50 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:50 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:50 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:51 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:51 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:52 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:52 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:52 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:53 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:53 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:54 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:54 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:55 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:55 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:55 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:56 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:56 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:56 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:57 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:57 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:58 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:58 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:58 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:59 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:59 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:50:59 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:00 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:00 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:00 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:01 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:01 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:02 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:02 +0100] "GET /about3.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:02 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:03 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:03 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:04 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:04 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:04 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:05 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:05 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:05 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:06 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:06 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:07 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:07 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:08 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:08 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:08 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:09 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:09 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:09 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:10 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:10 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:10 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:11 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:11 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:12 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:12 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:12 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:13 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:13 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:14 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:15 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:15 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:15 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:16 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:16 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:16 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:17 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:17 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:18 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:18 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:18 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:19 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:19 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:19 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:20 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:20 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:21 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:21 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:22 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:22 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:22 +0100] "GET /blurbs15.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:23 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:23 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:23 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:24 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:24 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:25 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:25 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:25 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:26 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:26 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:27 +0100] "GET /ac.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:27 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:27 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:28 +0100] "GET /xb.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:28 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:28 +0100] "GET /rh.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:29 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:29 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:30 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:30 +0100] "GET /xse25.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:31 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:31 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:31 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:32 +0100] "GET /shoyo.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:32 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:33 +0100] "GET /waq.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:33 +0100] "GET /wakak.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:33 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:34 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:34 +0100] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:34 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:35 +0100] "GET /cwclass.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:35 +0100] "GET /ah24.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:35 +0100] "GET /rtx.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:36 +0100] "GET /bipas.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:36 +0100] "GET /conte.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:37 +0100] "GET /class3.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:37 +0100] "GET /blurbs18.php HTTP/1.1" 301 162 "-" "-" 172.69.60.153 - - [02/Jan/2026:02:51:37 +0100] "GET /claa.php HTTP/1.1" 301 162 "-" "-" 162.158.39.199 - - [02/Jan/2026:03:43:48 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:48 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:49 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:49 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:49 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:50 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:50 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:50 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:51 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [02/Jan/2026:03:43:51 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:51 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:52 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:52 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:52 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:53 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:53 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:54 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:54 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:54 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:55 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:55 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:55 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:56 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:56 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:56 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:57 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:57 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:57 +0100] "GET /alfav4.1-tesla.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:58 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:58 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:43:58 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:59 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:59 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:43:59 +0100] "GET /aw.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [02/Jan/2026:03:44:00 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:00 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:00 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:01 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:01 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:01 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:02 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:02 +0100] "GET /default.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:03 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:44:03 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:44:03 +0100] "GET /file.php?fm=true HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [02/Jan/2026:03:44:04 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:04 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [02/Jan/2026:03:44:04 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [02/Jan/2026:05:08:39 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:40 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:41 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:41 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:42 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:42 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:43 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:44 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:44 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:45 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:45 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:46 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:46 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:47 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:48 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:48 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:49 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:49 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:50 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:50 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:51 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:52 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:52 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:53 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:53 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:54 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:54 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:55 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:56 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:56 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:57 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:57 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:58 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:58 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:08:59 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:00 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:00 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:01 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:01 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:02 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:02 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:03 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:04 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:04 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:05 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:05 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:06 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:06 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:07 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:08 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:08 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:09 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:09 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:10 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:10 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:11 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:12 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:12 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:13 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:13 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:14 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:14 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:15 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:16 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:16 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:17 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:17 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:18 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:18 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:19 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:20 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:20 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:21 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:21 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:22 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:22 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:23 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:24 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:24 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:25 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:25 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:26 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:26 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:27 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:28 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:28 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:29 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:29 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:30 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:30 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:31 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:32 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:32 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:33 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:33 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:34 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:34 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:35 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:36 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:36 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:37 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:37 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:38 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:38 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:39 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:40 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:40 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:41 +0100] "GET /juuuu.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:41 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:42 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:42 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:43 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:44 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:44 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:45 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:45 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:46 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:46 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:47 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:48 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:48 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:49 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:49 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:50 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:50 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:51 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:52 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:52 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:53 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:53 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:54 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:55 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:55 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:56 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:56 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:57 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:57 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:58 +0100] "GET /ac.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:59 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:09:59 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:00 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:00 +0100] "GET /xaz.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:01 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:01 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:02 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:02 +0100] "GET /wtz.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:03 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:04 +0100] "GET /xb.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:04 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:05 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.69.178.213 - - [02/Jan/2026:05:10:05 +0100] "GET /rh.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [02/Jan/2026:06:13:45 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.111.7 - - [02/Jan/2026:06:13:46 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.7 - - [02/Jan/2026:06:13:46 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.7 - - [02/Jan/2026:06:13:46 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.7 - - [02/Jan/2026:06:13:47 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.7 - - [02/Jan/2026:06:13:47 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.111.7 - - [02/Jan/2026:06:13:47 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:48 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:48 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [02/Jan/2026:06:13:48 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [02/Jan/2026:06:13:49 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:49 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:49 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:50 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [02/Jan/2026:06:13:50 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:50 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:50 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:51 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:51 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:51 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:52 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [02/Jan/2026:06:13:52 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:52 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:53 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [02/Jan/2026:06:13:53 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:54 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:54 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:54 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:55 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [02/Jan/2026:06:13:55 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:55 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:56 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:56 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:56 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:57 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:57 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [02/Jan/2026:06:13:57 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:58 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:58 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:58 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [02/Jan/2026:06:13:58 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:59 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [02/Jan/2026:06:13:59 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:13:59 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:14:00 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [02/Jan/2026:06:14:00 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:14:00 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:14:01 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:14:01 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:14:01 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [02/Jan/2026:06:14:02 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [02/Jan/2026:06:14:02 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.22.1.198 - - [02/Jan/2026:06:21:20 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.69.87.95 - - [02/Jan/2026:06:57:10 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:11 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:12 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:13 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:14 +0100] "GET /wp-content/inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:14 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:15 +0100] "GET /wp-content/l.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:15 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:16 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:17 +0100] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:17 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:18 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:18 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:19 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [02/Jan/2026:06:57:20 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:20 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:21 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:21 +0100] "GET /wp-includes/4.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:22 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:22 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:23 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:23 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:24 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:25 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:25 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:26 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:26 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:27 +0100] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:27 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:28 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:28 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:29 +0100] "GET /wp-includes/gelay.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:30 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:30 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:31 +0100] "GET /wp-includes/js/tinymce/plugins/compat3x/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:31 +0100] "GET /wp-includes/mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:32 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:32 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:33 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:33 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:34 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:35 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:35 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:36 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:37 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [02/Jan/2026:06:57:37 +0100] "GET /wsa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:38 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:39 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [02/Jan/2026:06:57:39 +0100] "GET /zwso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.198.197 - - [02/Jan/2026:07:30:06 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.68.22.142 - - [02/Jan/2026:07:39:58 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.23.177 - - [02/Jan/2026:07:44:07 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 108.162.249.114 - - [02/Jan/2026:10:07:18 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:18 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:19 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [02/Jan/2026:10:07:19 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:19 +0100] "GET /wp-content/inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:19 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:20 +0100] "GET /wp-content/l.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:20 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:21 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:21 +0100] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:21 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:22 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:22 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:22 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:23 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:23 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:23 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:23 +0100] "GET /wp-includes/4.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:24 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:24 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:24 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:25 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:25 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:25 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:26 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:26 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:27 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:27 +0100] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:27 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:28 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:28 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:28 +0100] "GET /wp-includes/gelay.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:29 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:29 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:29 +0100] "GET /wp-includes/js/tinymce/plugins/compat3x/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:29 +0100] "GET /wp-includes/mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:30 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:30 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:30 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:31 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:31 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:31 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:32 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:32 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:32 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:33 +0100] "GET /wsa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:33 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [02/Jan/2026:10:07:33 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [02/Jan/2026:10:07:34 +0100] "GET /zwso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [02/Jan/2026:10:51:53 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.223.111 - - [02/Jan/2026:10:53:09 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.68.245.89 - - [02/Jan/2026:10:59:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.66 Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:05 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.56 - - [02/Jan/2026:11:24:06 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.56 - - [02/Jan/2026:11:24:06 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.56 - - [02/Jan/2026:11:24:07 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.56 - - [02/Jan/2026:11:24:07 +0100] "GET /13.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.56 - - [02/Jan/2026:11:24:07 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.56 - - [02/Jan/2026:11:24:07 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.56 - - [02/Jan/2026:11:24:08 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.56 - - [02/Jan/2026:11:24:08 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:08 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [02/Jan/2026:11:24:08 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:09 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:09 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:09 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:09 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:10 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:10 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:10 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:10 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:11 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:11 +0100] "GET /app.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:11 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:11 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:12 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:12 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:12 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:12 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:13 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:13 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:13 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:13 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:14 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [02/Jan/2026:11:24:14 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:14 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:14 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:15 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:15 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:15 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:15 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:16 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:16 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:16 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:16 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:17 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:17 +0100] "GET /index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:17 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:18 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:18 +0100] "GET /k.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:18 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:18 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:19 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:19 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [02/Jan/2026:11:24:19 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:19 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:20 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:20 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:20 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:20 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:21 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:21 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:21 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:21 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:22 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:22 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:22 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:22 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [02/Jan/2026:11:24:23 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [02/Jan/2026:11:24:23 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:23 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:23 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [02/Jan/2026:11:24:24 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [02/Jan/2026:11:24:24 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.90.106 - - [02/Jan/2026:12:33:55 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:33:55 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:55 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:55 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:33:56 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:33:56 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:33:56 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:33:57 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:57 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:57 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:33:57 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:58 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:58 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:58 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:58 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:59 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:59 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:59 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:33:59 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:34:00 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:00 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:00 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:34:00 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:34:01 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:01 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:01 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:01 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:02 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:02 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:02 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:03 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:03 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:03 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:34:04 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:04 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:04 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:04 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:05 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:05 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:05 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:06 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:06 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:06 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:07 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:07 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:07 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:07 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:08 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:08 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:08 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:34:08 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:09 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:09 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:34:09 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:10 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:10 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:34:10 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:10 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:11 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:11 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:11 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:34:11 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:34:12 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:34:12 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:12 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:12 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:13 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:34:13 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:13 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:34:13 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:14 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:14 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:34:14 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:34:14 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:34:15 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:34:15 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:15 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:16 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:16 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:16 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:34:16 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:17 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:34:17 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:17 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:17 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:34:18 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:18 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:34:18 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:18 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:19 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:19 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:19 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:19 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:20 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:20 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:20 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:34:21 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:21 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:21 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:21 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:34:22 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:34:22 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:22 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:34:22 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:23 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:23 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:34:23 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:23 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:24 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:24 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:34:24 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:24 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:25 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:25 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:25 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:26 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:26 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:26 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:26 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:27 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:27 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:34:27 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:34:27 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:28 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:28 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:28 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:34:28 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:29 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:29 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:34:29 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:29 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:34:30 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:34:30 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:30 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:30 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:31 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:31 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:34:31 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:31 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:34:32 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:32 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:34:32 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:32 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:33 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:33 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:33 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:33 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:34 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:34:34 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:34 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:34:35 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:35 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:35 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:34:36 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:36 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:34:36 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:34:36 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:37 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:37 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:34:37 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:37 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:34:38 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:38 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:34:38 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:39 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:39 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:34:39 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:34:39 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:40 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:40 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:34:40 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:40 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:41 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:41 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:41 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:41 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:34:42 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:34:42 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:42 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:34:42 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:34:43 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:43 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:43 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:43 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:34:44 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:34:44 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:44 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:45 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:45 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:45 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:45 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:34:46 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:46 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:34:46 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:47 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:47 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:47 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:47 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:34:48 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:48 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:48 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:48 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:34:49 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:49 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:34:49 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:49 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:50 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:50 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:50 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:50 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:34:51 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:34:51 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:51 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:51 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:34:52 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:34:52 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:52 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:34:52 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:53 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:34:53 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:53 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:53 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:54 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:34:54 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:55 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:34:55 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:34:55 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:56 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:56 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:56 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:56 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:57 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:57 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:57 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:34:57 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:58 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:58 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:58 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:34:58 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:34:59 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:34:59 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:00 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:00 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:00 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:00 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:01 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:01 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:01 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:01 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:02 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:35:02 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:02 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:02 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:03 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:03 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:03 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:03 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:04 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:35:04 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:04 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:35:04 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:05 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:05 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:05 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:05 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:35:06 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:06 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:06 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:06 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:07 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:07 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:07 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:35:08 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:08 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:08 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:08 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:35:09 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:09 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:09 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:09 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:10 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:35:10 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:35:10 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:10 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:11 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:11 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:35:11 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:11 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:12 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:12 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:12 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:13 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:13 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:13 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:35:14 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:14 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:14 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:14 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:15 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:15 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:15 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:15 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:35:16 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:16 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:35:16 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:17 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:17 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:17 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:17 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:35:18 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:18 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:18 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:18 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:19 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:19 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:19 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:19 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:20 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:20 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:20 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:20 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:21 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:21 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:21 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:35:21 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:35:22 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:22 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:22 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:22 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:35:23 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:23 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:23 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:23 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:24 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:24 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:35:24 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:35:24 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:25 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:25 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:35:25 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:25 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:26 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:35:26 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:35:26 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:26 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:27 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:27 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:27 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:27 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:28 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:28 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:35:28 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:35:28 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:29 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:35:29 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:29 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:35:29 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:30 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:30 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:30 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:35:31 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:31 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:31 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:31 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:31 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:32 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:32 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:32 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:32 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:35:33 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:33 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:33 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:33 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:34 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:35:34 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:34 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:34 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:35 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:35 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:35:35 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:36 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:36 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:36 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:36 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:37 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:37 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:35:37 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:37 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:38 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:38 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:38 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:38 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:39 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:39 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:39 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:39 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:35:40 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:40 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:35:40 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:40 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:41 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:35:41 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:35:41 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:41 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:41 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:35:42 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:42 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:35:42 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:43 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:43 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:43 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:43 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:43 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:35:44 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:44 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:35:44 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:44 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:45 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:45 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:45 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:45 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:46 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:35:46 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:46 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:46 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:47 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:47 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:47 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:35:47 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:48 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:48 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:48 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:48 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:49 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:49 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:49 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:49 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:35:50 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:50 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:50 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:50 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:51 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:51 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:51 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:51 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:52 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:52 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:52 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:52 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:35:53 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:53 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:53 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:35:53 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:54 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:54 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:54 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:54 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:55 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:55 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:35:55 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:55 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:56 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:56 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:35:56 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:56 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:57 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:57 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:57 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:57 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:35:58 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:35:58 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:58 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:58 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:59 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:59 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:35:59 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:35:59 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:00 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:00 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:36:00 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:00 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:01 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:01 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:36:01 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:01 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:02 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:36:02 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:02 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:02 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:03 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:03 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:03 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:03 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:04 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:36:04 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:04 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:04 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:05 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:05 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:05 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:05 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:06 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:06 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:06 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:06 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:07 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:07 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:07 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:07 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:08 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:08 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:08 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:08 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:09 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:09 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:09 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:09 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:10 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:36:10 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:10 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:10 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:10 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:11 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:11 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:11 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:11 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:12 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:36:12 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:36:12 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:36:12 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:13 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:13 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:13 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:13 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:14 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:14 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:36:14 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:14 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:15 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:15 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:15 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:15 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:36:16 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:16 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:16 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:36:16 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:36:17 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:17 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:17 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:17 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:18 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:18 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:36:18 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:18 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:19 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:19 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:19 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:20 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:20 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:20 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:36:20 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:21 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:21 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:36:21 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:21 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:22 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:22 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:22 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:36:22 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:23 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:23 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:23 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:23 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:36:24 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:24 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:24 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:25 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:36:25 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:25 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:25 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:36:26 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:26 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:26 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:26 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:27 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:27 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:27 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:27 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:28 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:28 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:28 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:36:28 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:29 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:29 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:36:29 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:29 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:36:30 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:30 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:30 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:36:30 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:31 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:31 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:31 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:31 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:32 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:32 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:32 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:32 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:33 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:33 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:33 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:33 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:34 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:34 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:34 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:34 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:36:35 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:35 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:35 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:36:35 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:36:36 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:36 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:36 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:36 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:37 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:37 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:37 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:37 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:38 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:36:38 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:38 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:38 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:39 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:39 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:39 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:39 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:40 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:40 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:40 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:40 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:41 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:36:41 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:41 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:41 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:42 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:36:42 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:36:42 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:42 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:36:43 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:43 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:43 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:43 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:44 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:44 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:36:44 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:44 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:45 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:45 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:45 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:36:45 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:46 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:46 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:46 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:46 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:36:47 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:47 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:36:47 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:47 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:48 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:48 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:48 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:48 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:36:49 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:36:49 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:49 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:49 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:50 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:50 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:50 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:36:50 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:51 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:51 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:51 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:51 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:36:52 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:52 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:36:52 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:52 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:36:52 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:53 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:53 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:53 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:53 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:54 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:54 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:36:54 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:54 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:36:55 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:55 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:55 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:55 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:56 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:36:56 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:56 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:56 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:57 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:57 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:57 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:36:57 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:58 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:36:58 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:58 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:58 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:59 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:36:59 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:36:59 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:36:59 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:00 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:37:00 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:00 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:37:00 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:01 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:37:01 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:01 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:37:01 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:37:02 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:02 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:37:02 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:02 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:03 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:03 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:03 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:03 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:04 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:04 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:04 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:04 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:05 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:05 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:05 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:05 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:06 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:06 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:06 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:06 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:06 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:07 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:07 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:37:07 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:07 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:08 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:08 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:08 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:08 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:09 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:09 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:37:09 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:09 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:10 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:10 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:10 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:10 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:37:11 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:11 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:11 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:11 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:12 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:12 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:12 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:12 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:13 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:13 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:13 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:13 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:14 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:14 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:14 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:14 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:15 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:15 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:15 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:15 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:16 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:16 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:16 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:37:16 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:17 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:17 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:17 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:17 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:18 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:18 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:18 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:18 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:19 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:19 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:37:19 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:19 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:20 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:20 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:20 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:20 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:21 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:21 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:21 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:21 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:22 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:22 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:22 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:22 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:23 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:23 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:23 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:23 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:24 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:24 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:37:24 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:37:24 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:25 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:25 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:25 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:25 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:26 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:26 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:26 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:26 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:37:27 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:27 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:27 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:27 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:27 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:28 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:28 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:28 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:28 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:29 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:29 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:29 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:29 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:30 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:37:30 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:30 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:30 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:31 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:31 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:31 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:31 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:32 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:32 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:32 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:33 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:33 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:33 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:33 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:34 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:34 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:34 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:34 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:35 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:35 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:37:35 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:35 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:36 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:36 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:36 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:37:36 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:37 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:37 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:37:37 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:37 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:38 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:38 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:38 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:38 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:39 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:39 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:39 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:37:39 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:40 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:37:40 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:40 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:40 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:41 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:41 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:37:41 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:41 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:42 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:42 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:42 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:42 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:43 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:43 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:43 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:43 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:44 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:44 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:44 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:37:45 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:45 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:45 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:45 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:46 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:46 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:37:46 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:37:46 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:47 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:47 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:47 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:47 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:48 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:48 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:37:48 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:48 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:49 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:49 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:49 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:49 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:50 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:50 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:37:50 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [02/Jan/2026:12:37:51 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:51 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:51 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:51 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:52 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:52 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:52 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:52 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:53 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:53 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:37:53 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:53 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:54 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:37:54 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:37:54 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:54 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:37:55 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:55 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:55 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:37:55 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:37:56 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:56 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:56 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:56 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:57 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:57 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:57 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:57 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:37:57 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:37:58 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:37:58 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [02/Jan/2026:12:37:58 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:37:58 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:59 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:59 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:37:59 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:37:59 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:00 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:00 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:00 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:38:00 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:01 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:01 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:38:01 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [02/Jan/2026:12:38:01 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:38:02 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:38:02 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:02 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:02 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:03 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [02/Jan/2026:12:38:03 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:38:03 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:03 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:04 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:04 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:38:04 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [02/Jan/2026:12:38:04 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:38:05 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:05 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:05 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [02/Jan/2026:12:38:05 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:06 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [02/Jan/2026:12:38:06 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:38:06 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:06 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [02/Jan/2026:12:38:07 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [02/Jan/2026:12:38:07 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:07 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:38:07 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [02/Jan/2026:12:38:08 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:38:08 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:38:08 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:08 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [02/Jan/2026:12:38:09 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:09 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [02/Jan/2026:12:38:09 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [02/Jan/2026:12:38:09 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:10 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [02/Jan/2026:12:38:10 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [02/Jan/2026:12:38:10 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:10 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:11 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:12 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:13 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:14 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:15 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:16 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:17 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.1.193 - - [02/Jan/2026:12:38:18 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:19 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:20 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:21 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:22 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.1.193 - - [02/Jan/2026:12:38:23 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:24 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.1.193 - - [02/Jan/2026:12:38:25 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.1.193 - - [02/Jan/2026:12:38:25 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.1.193 - - [02/Jan/2026:12:38:25 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:26 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.1.193 - - [02/Jan/2026:12:38:26 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.1.193 - - [02/Jan/2026:12:38:26 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.1.193 - - [02/Jan/2026:12:38:26 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:08 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.198 - - [02/Jan/2026:13:11:09 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.198 - - [02/Jan/2026:13:11:10 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.198 - - [02/Jan/2026:13:11:10 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.198 - - [02/Jan/2026:13:11:10 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:11 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:11 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:11 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:12 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:12 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [02/Jan/2026:13:11:12 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:13 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:13 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:13 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:14 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:14 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [02/Jan/2026:13:11:14 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:15 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:15 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:15 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:16 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:16 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:16 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:17 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:17 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:17 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:18 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:18 +0100] "GET /alfav4.1-tesla.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:18 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:19 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:19 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:19 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:20 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:20 +0100] "GET /aw.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:20 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:20 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:21 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:21 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:21 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:22 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [02/Jan/2026:13:11:22 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:22 +0100] "GET /default.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:23 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:23 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:23 +0100] "GET /file.php?fm=true HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [02/Jan/2026:13:11:24 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:24 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [02/Jan/2026:13:11:24 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:26 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:27 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:28 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:29 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:29 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:30 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:30 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:31 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:31 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:32 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:33 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:33 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.103 - - [02/Jan/2026:13:38:34 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:34 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:35 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:35 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:36 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:37 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:37 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:38 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:38 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:39 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:39 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:40 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:40 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:41 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:42 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:42 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.103 - - [02/Jan/2026:13:38:43 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:43 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:44 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:44 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:45 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:46 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:46 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:47 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.103 - - [02/Jan/2026:13:38:47 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:48 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:48 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:49 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:50 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:50 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:51 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:51 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:52 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:52 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:53 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:54 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:54 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.103 - - [02/Jan/2026:13:38:55 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.103 - - [02/Jan/2026:13:38:55 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.207.62 - - [02/Jan/2026:14:30:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.66 Safari/535.11" 104.23.217.47 - - [02/Jan/2026:14:38:26 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.182.192 - - [02/Jan/2026:14:41:20 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.69.23.43 - - [02/Jan/2026:15:36:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.167.129 - - [02/Jan/2026:15:36:47 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:16 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.139 - - [02/Jan/2026:16:19:17 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.139 - - [02/Jan/2026:16:19:17 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [02/Jan/2026:16:19:18 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [02/Jan/2026:16:19:18 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [02/Jan/2026:16:19:18 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [02/Jan/2026:16:19:19 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [02/Jan/2026:16:19:19 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [02/Jan/2026:16:19:19 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.139 - - [02/Jan/2026:16:19:20 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:20 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:20 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:21 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:21 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:21 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:22 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:22 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:22 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:23 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:23 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:23 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:24 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:24 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:24 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:25 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:25 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:25 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:26 +0100] "GET /alfav4.1-tesla.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:26 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:26 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:27 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:27 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:27 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:28 +0100] "GET /aw.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:28 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:28 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [02/Jan/2026:16:19:29 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:29 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:29 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:30 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:30 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:30 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:31 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:31 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [02/Jan/2026:16:19:31 +0100] "GET /file.php?fm=true HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:32 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [02/Jan/2026:16:19:32 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [02/Jan/2026:16:19:32 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.241.112 - - [02/Jan/2026:16:49:09 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.215.116 - - [02/Jan/2026:17:47:11 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.70.215.25 - - [02/Jan/2026:17:47:11 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.70.215.25 - - [02/Jan/2026:17:47:11 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.70.215.25 - - [02/Jan/2026:17:47:11 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.70.215.25 - - [02/Jan/2026:17:47:11 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.70.215.25 - - [02/Jan/2026:17:47:11 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.70.215.25 - - [02/Jan/2026:17:47:11 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:06 +0100] "GET /num.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:07 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.4 - - [02/Jan/2026:19:19:08 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.81.102 - - [02/Jan/2026:19:19:09 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.81.102 - - [02/Jan/2026:19:19:10 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.81.102 - - [02/Jan/2026:19:19:15 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:16 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:16 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:17 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:17 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:18 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:18 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:19 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:19 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:20 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:20 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:20 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:21 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:21 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:22 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:23 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:23 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.4 - - [02/Jan/2026:19:19:24 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:24 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:25 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:25 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:26 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:27 +0100] "GET /alfav4.1-tesla.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:27 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:28 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:29 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:29 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:30 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:30 +0100] "GET /aw.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:30 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:31 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:32 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:32 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:32 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:33 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:33 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.4 - - [02/Jan/2026:19:19:34 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.4 - - [02/Jan/2026:19:19:34 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:35 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:36 +0100] "GET /file.php?fm=true HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:37 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:38 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.4 - - [02/Jan/2026:19:19:38 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.89.196 - - [02/Jan/2026:19:40:15 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.89.196 - - [02/Jan/2026:19:40:16 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.242.160 - - [02/Jan/2026:20:16:05 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:06 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:06 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:07 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:07 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:07 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:07 +0100] "GET /file56.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:08 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:08 +0100] "GET /tny.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:08 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:09 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:09 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:09 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:10 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:10 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:11 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:11 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:12 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:12 +0100] "GET /991.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:12 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:13 +0100] "GET /mln.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:13 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:14 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:14 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:14 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:14 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:15 +0100] "GET /users.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:15 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:15 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:16 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:16 +0100] "GET /wsheet1.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:16 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:16 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:17 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:17 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:17 +0100] "GET /manage.php HTTP/1.1" 301 162 "-" "-" 172.71.242.160 - - [02/Jan/2026:20:16:18 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 104.23.175.157 - - [02/Jan/2026:20:34:14 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.69.178.224 - - [02/Jan/2026:21:07:38 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.179.94 - - [02/Jan/2026:21:51:16 +0100] "GET /0.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:17 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:18 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:19 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:19 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:20 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:21 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:21 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:22 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:23 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:23 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.179.94 - - [02/Jan/2026:21:51:24 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:25 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:25 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:26 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:26 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:27 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:27 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:28 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:28 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:29 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:30 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:30 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:31 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:31 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.179.94 - - [02/Jan/2026:21:51:32 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:32 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:33 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:34 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:34 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:35 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:35 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:36 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:36 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:37 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:37 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:38 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:39 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:39 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:40 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:40 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:41 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:41 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:42 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:43 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:43 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:44 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:44 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:45 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:45 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:46 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:47 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:47 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:48 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:48 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:49 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:49 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:50 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:50 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.179.94 - - [02/Jan/2026:21:51:51 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:52 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:52 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:53 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.179.94 - - [02/Jan/2026:21:51:53 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:54 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:54 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:55 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:56 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:56 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.94 - - [02/Jan/2026:21:51:57 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.179.94 - - [02/Jan/2026:21:51:57 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:07:59 +0100] "GET /function/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:00 +0100] "GET /fw.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:00 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:00 +0100] "GET /goat.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:01 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:01 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:01 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:01 +0100] "GET /images/alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:02 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:02 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:02 +0100] "GET /images/xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:02 +0100] "GET /index2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:03 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:03 +0100] "GET /lock360.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:03 +0100] "GET /networks.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:03 +0100] "GET /log.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:04 +0100] "GET /luuf.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:04 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:04 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:04 +0100] "GET /mm.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:05 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:05 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:05 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:05 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [02/Jan/2026:22:08:06 +0100] "GET /h.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:06 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:06 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:06 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:07 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:07 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:07 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:07 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:08 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:08 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:08 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [02/Jan/2026:22:08:08 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:09 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:09 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:09 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:10 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:10 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:10 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:10 +0100] "GET /d.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:11 +0100] "GET /head.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:11 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:11 +0100] "GET /sa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:11 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [02/Jan/2026:22:08:12 +0100] "GET /uploaded_script.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.10.41 - - [02/Jan/2026:22:30:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.49.200 - - [02/Jan/2026:22:44:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 172.64.223.5 - - [02/Jan/2026:22:56:33 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 162.158.49.233 - - [02/Jan/2026:23:10:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 172.71.242.159 - - [03/Jan/2026:00:14:19 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.42.68 - - [03/Jan/2026:00:21:36 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 162.158.42.191 - - [03/Jan/2026:00:21:36 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 162.158.42.191 - - [03/Jan/2026:00:21:36 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 162.158.42.191 - - [03/Jan/2026:00:21:36 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 162.158.42.191 - - [03/Jan/2026:00:21:37 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 162.158.42.191 - - [03/Jan/2026:00:21:37 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 162.158.42.191 - - [03/Jan/2026:00:21:37 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:33 +0100] "GET /.alf.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [03/Jan/2026:00:44:34 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [03/Jan/2026:00:44:34 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [03/Jan/2026:00:44:34 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [03/Jan/2026:00:44:35 +0100] "GET /13.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [03/Jan/2026:00:44:35 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [03/Jan/2026:00:44:36 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [03/Jan/2026:00:44:36 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [03/Jan/2026:00:44:36 +0100] "GET /9.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [03/Jan/2026:00:44:36 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [03/Jan/2026:00:44:37 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [03/Jan/2026:00:44:37 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [03/Jan/2026:00:44:37 +0100] "GET /admin/upload/mini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [03/Jan/2026:00:44:38 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.68 - - [03/Jan/2026:00:44:38 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:38 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:39 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:39 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:39 +0100] "GET /alfa HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:40 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:40 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:40 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:41 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:41 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:41 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:42 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:42 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:43 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:43 +0100] "GET /class.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:43 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:44 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:44 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:44 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:45 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:45 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:45 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:46 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.115 - - [03/Jan/2026:00:44:46 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:46 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:47 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:47 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:47 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:48 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:48 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.115 - - [03/Jan/2026:00:44:48 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:49 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.115 - - [03/Jan/2026:00:44:49 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:14 +0100] "GET /0.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:14 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:14 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:15 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:15 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:15 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:16 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:16 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [03/Jan/2026:01:51:16 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:16 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:17 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:17 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:17 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:17 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:18 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:18 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:18 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:18 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:19 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:19 +0100] "GET /api.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:19 +0100] "GET /app.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:20 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:20 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:20 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:20 +0100] "GET /c.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:21 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:21 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:21 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:21 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:22 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:22 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:22 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:22 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:23 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:23 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:23 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:24 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:24 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:24 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [03/Jan/2026:01:51:24 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:25 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:25 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:25 +0100] "GET /help.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:25 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:26 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:26 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:26 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:27 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:27 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:27 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:27 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:28 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [03/Jan/2026:01:51:28 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:28 +0100] "GET /root.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:28 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:29 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:29 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:29 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:30 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:30 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:30 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:30 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:31 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:31 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:31 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:31 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:32 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:32 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:32 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:32 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [03/Jan/2026:01:51:33 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [03/Jan/2026:01:51:33 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:02:46:16 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:19 +0100] "GET /lisa.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:20 +0100] "GET /000.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:21 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:22 +0100] "GET /bless14.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:23 +0100] "GET /ws35.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:23 +0100] "GET /87.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:24 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:25 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:26 +0100] "GET /acwfihfh.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:26 +0100] "GET /f8.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:27 +0100] "GET /bras.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:28 +0100] "GET /an8.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:28 +0100] "GET /esp.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:29 +0100] "GET /21x.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:29 +0100] "GET /out.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:30 +0100] "GET /flower2.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:31 +0100] "GET /family.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:32 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:33 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:34 +0100] "GET /asf.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:34 +0100] "GET /lanz.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:35 +0100] "GET /xeeex.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:35 +0100] "GET /tons.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:36 +0100] "GET /wpup.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:37 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:37 +0100] "GET /f2f.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:41 +0100] "GET /ths.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:41 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:42 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:43 +0100] "GET /d996699999.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:43 +0100] "GET /ierne.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:44 +0100] "GET /xde.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:45 +0100] "GET /1yade.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:45 +0100] "GET /gettest.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:02:46:46 +0100] "GET /bjfl.php HTTP/1.1" 301 162 "-" "-" 172.69.178.212 - - [03/Jan/2026:03:11:54 +0100] "GET /function/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.179.156 - - [03/Jan/2026:03:11:55 +0100] "GET /fw.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.179.156 - - [03/Jan/2026:03:11:56 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:11:57 +0100] "GET /goat.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:11:57 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:11:58 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:11:58 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:11:59 +0100] "GET /images/alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:11:59 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.212 - - [03/Jan/2026:03:12:00 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:01 +0100] "GET /images/xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:01 +0100] "GET /index2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:02 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:02 +0100] "GET /lock360.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:03 +0100] "GET /networks.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:03 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:04 +0100] "GET /luuf.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:05 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:05 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:06 +0100] "GET /mm.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:06 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:07 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:07 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:08 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:09 +0100] "GET /h.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:09 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:10 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:10 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.212 - - [03/Jan/2026:03:12:11 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:11 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:12 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:12 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:13 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.212 - - [03/Jan/2026:03:12:14 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:14 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:15 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:15 +0100] "GET /wp-includes/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:16 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:16 +0100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:17 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:18 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:18 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [03/Jan/2026:03:12:19 +0100] "GET /d.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:19 +0100] "GET /head.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:20 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:20 +0100] "GET /sa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:21 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [03/Jan/2026:03:12:22 +0100] "GET /uploaded_script.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.50.139 - - [03/Jan/2026:03:30:31 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.68.164.37 - - [03/Jan/2026:03:35:07 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.10.41 - - [03/Jan/2026:03:41:34 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.184.206 - - [03/Jan/2026:03:41:43 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.6.151 - - [03/Jan/2026:04:54:01 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:01 +0100] "GET /lisa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:02 +0100] "GET /000.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:02 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:02 +0100] "GET /bless14.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:03 +0100] "GET /ws35.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:03 +0100] "GET /87.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:03 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:04 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:04 +0100] "GET /acwfihfh.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:04 +0100] "GET /f8.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:05 +0100] "GET /bras.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:05 +0100] "GET /an8.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:05 +0100] "GET /esp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:06 +0100] "GET /21x.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:06 +0100] "GET /out.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:06 +0100] "GET /flower2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:07 +0100] "GET /family.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:07 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:07 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:08 +0100] "GET /asf.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:08 +0100] "GET /lanz.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:08 +0100] "GET /xeeex.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:09 +0100] "GET /tons.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:09 +0100] "GET /wpup.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:09 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:10 +0100] "GET /f2f.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:10 +0100] "GET /ths.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:10 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:11 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:11 +0100] "GET /d996699999.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:11 +0100] "GET /ierne.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:11 +0100] "GET /xde.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:12 +0100] "GET /1yade.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:12 +0100] "GET /gettest.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [03/Jan/2026:04:54:12 +0100] "GET /bjfl.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [03/Jan/2026:05:38:55 +0100] "GET /.alf.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:38:56 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:38:57 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:38:57 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [03/Jan/2026:05:38:58 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:38:58 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [03/Jan/2026:05:38:59 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:38:59 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:00 +0100] "GET /9.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:00 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:01 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:01 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:02 +0100] "GET /admin/upload/mini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:03 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:03 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:04 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:04 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:05 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [03/Jan/2026:05:39:05 +0100] "GET /alfa HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:06 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:06 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:07 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:07 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:08 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:09 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:09 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:10 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:10 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [03/Jan/2026:05:39:11 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:11 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:12 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:12 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:13 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:13 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:14 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:14 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:15 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [03/Jan/2026:05:39:16 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:16 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:17 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:17 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:18 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:18 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:19 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [03/Jan/2026:05:39:19 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:20 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [03/Jan/2026:05:39:20 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:35 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.180 - - [03/Jan/2026:05:44:36 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:05:44:36 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.180 - - [03/Jan/2026:05:44:37 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:05:44:37 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:05:44:37 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:05:44:38 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.180 - - [03/Jan/2026:05:44:38 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:05:44:38 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.180 - - [03/Jan/2026:05:44:39 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:05:44:39 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:05:44:40 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:05:44:40 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:40 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:41 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:41 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:41 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:42 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:42 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:42 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:43 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:43 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [03/Jan/2026:05:44:43 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:44 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:44 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:44 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:45 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:45 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:45 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:46 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [03/Jan/2026:05:44:46 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:46 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:47 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:47 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:47 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:48 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:48 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:48 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:49 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:49 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:49 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:50 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:50 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:50 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:51 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [03/Jan/2026:05:44:51 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:51 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:52 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:52 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:52 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [03/Jan/2026:05:44:53 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [03/Jan/2026:05:44:53 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.65.134 - - [03/Jan/2026:07:12:34 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:13 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:14 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:14 +0100] "GET /ups.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:14 +0100] "GET /wp-admin/admin-post.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:14 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:14 +0100] "GET /tgrs.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:14 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:15 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:15 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:15 +0100] "GET /wp-the1me.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:15 +0100] "GET /wp1.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:15 +0100] "GET /static/as.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:15 +0100] "GET /hk.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:16 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:16 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:16 +0100] "GET /zxz.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:16 +0100] "GET /fs.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:16 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:16 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:17 +0100] "GET /shell1.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:17 +0100] "GET /wp-mail.php/wp-includes/ID3/rnEPv9.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:17 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:17 +0100] "GET /n.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:17 +0100] "GET /jmfi2.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:17 +0100] "GET /nij.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:18 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:18 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:18 +0100] "GET /auth.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:18 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:18 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:18 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:19 +0100] "GET /wp-admin/css/colour.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:19 +0100] "GET /zc-903.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:19 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:19 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:19 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:19 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:20 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:20 +0100] "GET /hook.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:20 +0100] "GET /wcas.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:20 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:20 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:20 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:21 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:21 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:21 +0100] "GET /himu.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:21 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:21 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:21 +0100] "GET /abt.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:22 +0100] "GET /n3.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:22 +0100] "GET /v4.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:22 +0100] "GET /wb.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:22 +0100] "GET /mnkalo.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:22 +0100] "GET /wp-x7.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:22 +0100] "GET /asd67.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:23 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:23 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:23 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:23 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:23 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:24 +0100] "GET /ol.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:24 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:24 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.70.38.185 - - [03/Jan/2026:07:55:24 +0100] "GET /class-wp.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:24 +0100] "GET /nope.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:24 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:25 +0100] "GET /444.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:25 +0100] "GET /mans.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:25 +0100] "GET /hello.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:25 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:25 +0100] "GET /usep.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:25 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:25 +0100] "GET /nc.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:26 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:26 +0100] "GET /gdn.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:26 +0100] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:26 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:26 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:26 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:27 +0100] "GET /png.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:27 +0100] "GET /raw.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:27 +0100] "GET /xtt.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:27 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:27 +0100] "GET /luxe.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:27 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:28 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:28 +0100] "GET /indo.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:28 +0100] "GET /f6.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:28 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:28 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:29 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:29 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:29 +0100] "GET /777.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:29 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:29 +0100] "GET /123.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:29 +0100] "GET /file3.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:30 +0100] "GET /media.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:30 +0100] "GET /r4f_1.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:30 +0100] "GET /031.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:30 +0100] "GET /AxAo.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:30 +0100] "GET /shellalfa.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:30 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:31 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:31 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:31 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:31 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:31 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:32 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:32 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:32 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.70.39.159 - - [03/Jan/2026:07:55:32 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:32 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:32 +0100] "GET /mo.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:33 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:33 +0100] "GET /miansha.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:33 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:33 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:33 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:33 +0100] "GET /ioxi-o2.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:34 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:34 +0100] "GET /asas.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:34 +0100] "GET /js.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:34 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:34 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:34 +0100] "GET /zxin.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:35 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:35 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:35 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:35 +0100] "GET /sto.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:35 +0100] "GET /file21.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:35 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:36 +0100] "GET /fileas.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:36 +0100] "GET /ok.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:36 +0100] "GET /layout.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:36 +0100] "GET /wp-gr.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:36 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:36 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:37 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:37 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:37 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:37 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:37 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:37 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:38 +0100] "GET /owl.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:38 +0100] "GET /yas.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:38 +0100] "GET /dlu.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:38 +0100] "GET /v3.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:38 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:38 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:39 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:39 +0100] "GET /wp-is.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:39 +0100] "GET /wolv2.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:39 +0100] "GET /ftp.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:39 +0100] "GET /ouh.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:40 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:40 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:40 +0100] "GET /mws.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:40 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:40 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:40 +0100] "GET /te.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:41 +0100] "GET /555.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:41 +0100] "GET /33.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:41 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:41 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:41 +0100] "GET /lo.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:41 +0100] "GET /file32.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:42 +0100] "GET /ava.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:42 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:42 +0100] "GET /o.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:42 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:42 +0100] "GET /noe.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:42 +0100] "GET /wfile.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:43 +0100] "GET /about3.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:43 +0100] "GET /gelap.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:43 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:43 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:43 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:43 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:44 +0100] "GET /css/up.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:44 +0100] "GET /inde.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:44 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:44 +0100] "GET /admir.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:44 +0100] "GET /file18.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:44 +0100] "GET /666.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:45 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:45 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:45 +0100] "GET /an7.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:45 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:45 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:45 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:46 +0100] "GET /ffile.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:46 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:46 +0100] "GET /acp.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:46 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:46 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:46 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:47 +0100] "GET /lol.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:47 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:47 +0100] "GET /cccc.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:47 +0100] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:47 +0100] "GET /sko.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:47 +0100] "GET /000.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:48 +0100] "GET /zwq.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:48 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:48 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:48 +0100] "GET /xxx.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:48 +0100] "GET /ana.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:48 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:49 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:49 +0100] "GET /she.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:49 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:49 +0100] "GET /excel.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:49 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:49 +0100] "GET /ap.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:50 +0100] "GET /co.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:50 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:50 +0100] "GET /love.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:50 +0100] "GET /wso3.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:50 +0100] "GET /x7.php HTTP/1.1" 301 162 "-" "-" 172.70.38.19 - - [03/Jan/2026:07:55:50 +0100] "GET /xxl.php HTTP/1.1" 301 162 "-" "-" 172.69.60.152 - - [03/Jan/2026:08:02:49 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:50 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:50 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:51 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [03/Jan/2026:08:02:51 +0100] "GET /wp-content/inputs.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:51 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:52 +0100] "GET /wp-content/l.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [03/Jan/2026:08:02:52 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:52 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:53 +0100] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:53 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:53 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:54 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:54 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:54 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:55 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:55 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:55 +0100] "GET /wp-includes/4.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:56 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:56 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:56 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:57 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:57 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:57 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:58 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:58 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.60.152 - - [03/Jan/2026:08:02:58 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:59 +0100] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:02:59 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:02:59 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:00 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:00 +0100] "GET /wp-includes/gelay.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:00 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:01 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:03:01 +0100] "GET /wp-includes/js/tinymce/plugins/compat3x/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:01 +0100] "GET /wp-includes/mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:02 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:02 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:02 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:03 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:03 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:03:03 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:04 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:04 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:04 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:05 +0100] "GET /wsa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.60.152 - - [03/Jan/2026:08:03:05 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:05 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.60.152 - - [03/Jan/2026:08:03:06 +0100] "GET /zwso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:48 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:48 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:49 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:49 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:49 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:49 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:50 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:50 +0100] "GET /a.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:50 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:50 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:51 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:51 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:51 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:51 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:52 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:52 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:52 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:53 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:53 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:53 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:53 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:54 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:54 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:54 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:54 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:55 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:55 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:55 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:55 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:56 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:56 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:56 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:56 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:57 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:46:57 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:57 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:57 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:58 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:58 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:58 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:58 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:59 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [03/Jan/2026:09:46:59 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:46:59 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [03/Jan/2026:09:47:00 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:00 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:00 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:00 +0100] "GET /k.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:01 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:01 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:01 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [03/Jan/2026:09:47:01 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:02 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:02 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:02 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:02 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:03 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:03 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:03 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:04 +0100] "GET /user.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:04 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:04 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:04 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:05 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:05 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:05 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:05 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:06 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:06 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [03/Jan/2026:09:47:06 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [03/Jan/2026:09:47:06 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [03/Jan/2026:09:47:07 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:22 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.108.123 - - [03/Jan/2026:10:35:23 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.123 - - [03/Jan/2026:10:35:24 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.123 - - [03/Jan/2026:10:35:25 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.123 - - [03/Jan/2026:10:35:26 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.123 - - [03/Jan/2026:10:35:26 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.123 - - [03/Jan/2026:10:35:26 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.123 - - [03/Jan/2026:10:35:27 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.123 - - [03/Jan/2026:10:35:27 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.123 - - [03/Jan/2026:10:35:28 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.123 - - [03/Jan/2026:10:35:28 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.123 - - [03/Jan/2026:10:35:29 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.123 - - [03/Jan/2026:10:35:29 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.123 - - [03/Jan/2026:10:35:30 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.108.123 - - [03/Jan/2026:10:35:30 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:31 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:31 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:32 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:32 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:32 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.108.90 - - [03/Jan/2026:10:35:33 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:33 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:34 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:34 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:34 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:35 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:35 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:36 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:36 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:37 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:37 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:37 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:38 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:38 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:39 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:39 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:39 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:40 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:41 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:42 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:42 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:42 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:43 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:43 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:44 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:44 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:44 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:45 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.108.90 - - [03/Jan/2026:10:35:45 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:46 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.108.90 - - [03/Jan/2026:10:35:46 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:47 +0100] "GET /server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:47 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:48 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:48 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:48 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:49 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:49 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:49 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:49 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:50 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:50 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:50 +0100] "GET /install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:50 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:51 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [03/Jan/2026:11:21:51 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:51 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:51 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:52 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:52 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:52 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:52 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:53 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:53 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:53 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:53 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:54 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:54 +0100] "GET /black.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:54 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:54 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:55 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:55 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:55 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:55 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:56 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:56 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:56 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:56 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:21:57 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:57 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:57 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:57 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:58 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:58 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:58 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:58 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:59 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [03/Jan/2026:11:21:59 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:59 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:21:59 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [03/Jan/2026:11:22:00 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:00 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:00 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:00 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:01 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:01 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:01 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:01 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:02 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:02 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:02 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:02 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:03 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:03 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:03 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:03 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:04 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:04 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:04 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [03/Jan/2026:11:22:04 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:05 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:05 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:05 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:05 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:06 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:06 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:06 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:06 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:07 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [03/Jan/2026:11:22:07 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [03/Jan/2026:11:22:07 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.223.110 - - [03/Jan/2026:12:38:12 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.221.13 - - [03/Jan/2026:12:38:59 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.69.87.95 - - [03/Jan/2026:13:22:38 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:39 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:39 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:40 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:41 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:41 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:42 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:42 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:43 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:43 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:44 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:45 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:45 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:46 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:46 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:47 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:47 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:48 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:49 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:49 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:50 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:50 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:51 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:51 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:52 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:53 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:53 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:54 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:54 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:55 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:55 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:56 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:57 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:57 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:58 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:58 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:22:59 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:22:59 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:23:00 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:23:01 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:23:01 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:23:02 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:23:02 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:23:03 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:23:03 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:23:04 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:23:04 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:23:05 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:23:06 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:23:06 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [03/Jan/2026:13:23:07 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [03/Jan/2026:13:23:07 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:33 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:34 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:35 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:36 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:36 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:37 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:38 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:38 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:39 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:39 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:40 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:40 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:41 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:42 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:42 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:43 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:43 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:44 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:44 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:45 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:45 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:46 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:47 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:47 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:48 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:48 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:49 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:49 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:50 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:51 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:51 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:52 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:52 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:53 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:53 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:54 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:55 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.119 - - [03/Jan/2026:13:47:55 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:56 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:47:56 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:57 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:57 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:58 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:59 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:47:59 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:48:00 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:48:00 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:48:01 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:13:48:02 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:48:02 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:13:48:03 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:27 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:14:20:28 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:14:20:28 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.180 - - [03/Jan/2026:14:20:28 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.180 - - [03/Jan/2026:14:20:29 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.180 - - [03/Jan/2026:14:20:29 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.180 - - [03/Jan/2026:14:20:29 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.180 - - [03/Jan/2026:14:20:30 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:14:20:30 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:14:20:30 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:14:20:31 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.180 - - [03/Jan/2026:14:20:31 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.198 - - [03/Jan/2026:14:20:31 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:32 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:32 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:32 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:33 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:33 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:33 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:34 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:34 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:34 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:35 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:35 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.198 - - [03/Jan/2026:14:20:36 +0100] "GET /13.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:36 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:36 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:37 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:37 +0100] "GET /php.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:37 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:38 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:38 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:38 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:39 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:39 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:39 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:40 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:40 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:40 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:41 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:41 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.198 - - [03/Jan/2026:14:20:41 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:42 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:42 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:42 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:43 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:43 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:43 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:44 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:44 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:44 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:45 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:45 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:45 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:46 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:46 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:46 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:47 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.198 - - [03/Jan/2026:14:20:47 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:47 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:48 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:48 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:48 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:49 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:49 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:49 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:50 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:50 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:50 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:51 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:51 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:51 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:52 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:52 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:52 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:53 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:53 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:53 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [03/Jan/2026:14:20:54 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [03/Jan/2026:14:20:54 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:50 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.119 - - [03/Jan/2026:16:43:51 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:52 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:52 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:53 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:53 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:43:54 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:43:54 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:55 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:55 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:43:56 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:57 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:43:57 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:58 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.119 - - [03/Jan/2026:16:43:58 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:59 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:43:59 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:00 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:00 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:01 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:02 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:02 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:03 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:03 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:04 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:04 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:05 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:05 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:06 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:07 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:07 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:08 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:08 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:09 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:09 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:10 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:10 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:11 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:11 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:12 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:13 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:13 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.119 - - [03/Jan/2026:16:44:14 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:14 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:15 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:15 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.119 - - [03/Jan/2026:16:44:16 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:16 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.119 - - [03/Jan/2026:16:44:17 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:18 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.119 - - [03/Jan/2026:16:44:18 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:07 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:07 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:08 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:08 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:08 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:08 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:09 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:09 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:09 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:09 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:10 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:10 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:10 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:10 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:11 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:11 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:11 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:11 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:12 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:12 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [03/Jan/2026:17:05:12 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:12 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:13 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:13 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:13 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:14 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:14 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:14 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:14 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:15 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:15 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:15 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:15 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:16 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:16 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:16 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:16 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:17 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:17 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:17 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:17 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:18 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:18 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:18 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:18 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:19 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:19 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [03/Jan/2026:17:05:19 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [03/Jan/2026:17:05:19 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:20 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:20 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [03/Jan/2026:17:05:20 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.164.111 - - [03/Jan/2026:17:06:55 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.39.104 - - [03/Jan/2026:17:29:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.68.210.207 - - [03/Jan/2026:17:37:59 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [03/Jan/2026:17:38:00 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [03/Jan/2026:17:38:00 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.58 - - [03/Jan/2026:17:38:01 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [03/Jan/2026:17:38:01 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.58 - - [03/Jan/2026:17:38:01 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.58 - - [03/Jan/2026:17:38:02 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [03/Jan/2026:17:38:02 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [03/Jan/2026:17:38:02 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.58 - - [03/Jan/2026:17:38:02 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.58 - - [03/Jan/2026:17:38:03 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:03 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [03/Jan/2026:17:38:03 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:04 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:04 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:04 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:05 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:05 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [03/Jan/2026:17:38:06 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:06 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:06 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:07 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:07 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:07 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:08 +0100] "GET /13.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:08 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:08 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:09 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [03/Jan/2026:17:38:09 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:09 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:10 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:10 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:10 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:10 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:11 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:11 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:11 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:12 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:12 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [03/Jan/2026:17:38:12 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:13 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:13 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:13 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:14 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:14 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:14 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:15 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:15 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:15 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:16 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:16 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:16 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:17 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:17 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:17 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:18 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:18 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:18 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:19 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:19 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:19 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:20 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:20 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:20 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:21 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:21 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:21 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:22 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:22 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:22 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [03/Jan/2026:17:38:23 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:23 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:23 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:24 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:24 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:24 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:25 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [03/Jan/2026:17:38:25 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:25 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [03/Jan/2026:17:38:26 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.111.89 - - [03/Jan/2026:19:15:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 172.70.42.178 - - [03/Jan/2026:19:15:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.222.107 - - [03/Jan/2026:19:15:42 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.206.131 - - [03/Jan/2026:20:50:59 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.70.206.131 - - [03/Jan/2026:20:50:59 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.70.206.131 - - [03/Jan/2026:20:50:59 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.70.206.131 - - [03/Jan/2026:20:50:59 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.70.206.131 - - [03/Jan/2026:20:50:59 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.70.206.131 - - [03/Jan/2026:20:50:59 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.70.206.131 - - [03/Jan/2026:20:50:59 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:39 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:39 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:40 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:40 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:40 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:41 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:41 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:41 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:42 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:42 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:42 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:43 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:43 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:43 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:44 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [03/Jan/2026:21:03:44 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:44 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:44 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:45 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:45 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:46 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:46 +0100] "GET /class.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:46 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:47 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:47 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:47 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:48 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:48 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:48 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:49 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:49 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:49 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:50 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:50 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:50 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:51 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:51 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:51 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:51 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:52 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:52 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:52 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:53 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:53 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:53 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:54 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:54 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:54 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:55 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:55 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:55 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:56 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:56 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [03/Jan/2026:21:03:56 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:57 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:57 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:57 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:58 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:58 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:58 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:59 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:03:59 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:03:59 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:00 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:04:00 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:00 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:04:01 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:01 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:04:01 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:02 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:02 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:04:02 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:03 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:03 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:03 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:04:04 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:04:04 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:04 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [03/Jan/2026:21:04:05 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [03/Jan/2026:21:04:05 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:49 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:50 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:50 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:51 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:51 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:51 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:51 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:52 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:52 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:52 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:52 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:53 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:53 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:53 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:53 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:54 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:54 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:54 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:54 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:55 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:55 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:55 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:55 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:56 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:56 +0100] "GET /c.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:56 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:56 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:57 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:57 +0100] "GET /config.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:57 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:58 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:58 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:58 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:58 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.121 - - [03/Jan/2026:21:38:59 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:59 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:38:59 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:38:59 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:00 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:00 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:00 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:00 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:01 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:01 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:01 +0100] "GET /index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:02 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:02 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:02 +0100] "GET /k.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:02 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:03 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:03 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.121 - - [03/Jan/2026:21:39:03 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:03 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:04 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:04 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:04 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:04 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.121 - - [03/Jan/2026:21:39:05 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:05 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:05 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:05 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:06 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:06 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:06 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:06 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:07 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:07 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:07 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:07 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [03/Jan/2026:21:39:08 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:08 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [03/Jan/2026:21:39:08 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.175.110 - - [03/Jan/2026:21:51:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.88.111 - - [03/Jan/2026:21:51:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.162.34 - - [03/Jan/2026:21:51:17 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.162.34 - - [03/Jan/2026:21:51:17 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.162.34 - - [03/Jan/2026:21:51:18 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.162.34 - - [03/Jan/2026:21:51:18 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.162.34 - - [03/Jan/2026:21:51:19 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.162.34 - - [03/Jan/2026:21:51:19 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.162.34 - - [03/Jan/2026:21:51:19 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.162.34 - - [03/Jan/2026:21:51:20 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.162.34 - - [03/Jan/2026:21:51:20 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 108.162.246.155 - - [03/Jan/2026:21:52:04 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 108.162.246.155 - - [03/Jan/2026:21:52:04 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 108.162.246.155 - - [03/Jan/2026:21:52:04 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 108.162.246.155 - - [03/Jan/2026:21:52:04 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 108.162.246.155 - - [03/Jan/2026:21:52:04 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 108.162.246.155 - - [03/Jan/2026:21:52:04 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 108.162.246.155 - - [03/Jan/2026:21:52:05 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 104.23.225.192 - - [03/Jan/2026:22:03:12 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.232.80 - - [03/Jan/2026:22:08:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.126.61 - - [03/Jan/2026:22:08:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.184.206 - - [03/Jan/2026:22:34:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.138.238 - - [04/Jan/2026:01:14:09 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.198 - - [04/Jan/2026:01:14:10 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.198 - - [04/Jan/2026:01:14:10 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.198 - - [04/Jan/2026:01:14:11 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.198 - - [04/Jan/2026:01:14:11 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.198 - - [04/Jan/2026:01:14:11 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.198 - - [04/Jan/2026:01:14:12 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:12 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:12 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:13 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:13 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:13 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:14 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:14 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:14 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:15 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:15 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:15 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:16 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [04/Jan/2026:01:14:16 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:16 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:17 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:17 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:17 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:18 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:18 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:18 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:19 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:19 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:19 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:20 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:20 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:20 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:21 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:21 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [04/Jan/2026:01:14:21 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:22 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:22 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:22 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:23 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:23 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:23 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:24 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:24 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:24 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:25 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [04/Jan/2026:01:14:25 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:25 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:26 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:26 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [04/Jan/2026:01:14:26 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [04/Jan/2026:01:14:27 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:10 +0100] "GET /dapa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:11 +0100] "GET /first.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:11 +0100] "GET /myy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.119 - - [04/Jan/2026:01:24:12 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.119 - - [04/Jan/2026:01:24:12 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:12 +0100] "GET /security.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:12 +0100] "GET /spip.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:13 +0100] "GET /Ipv6.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:13 +0100] "GET /geido.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:13 +0100] "GET /halo.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:13 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.119 - - [04/Jan/2026:01:24:14 +0100] "GET /Cachex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:14 +0100] "GET /rezor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.119 - - [04/Jan/2026:01:24:14 +0100] "GET /byp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.119 - - [04/Jan/2026:01:24:14 +0100] "GET /bypass.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:15 +0100] "GET /bibil.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:15 +0100] "GET /wpupex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:15 +0100] "GET /CasperSecurity.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:15 +0100] "GET /test/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:16 +0100] "GET /test/lm.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:16 +0100] "GET /tmp/security.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:16 +0100] "GET /images/security.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:16 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:17 +0100] "GET /first/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:17 +0100] "GET /fonts/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:17 +0100] "GET /filemanager/world.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:17 +0100] "GET /MTOS/byp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:18 +0100] "GET /blog/byp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:18 +0100] "GET /cms/byp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:18 +0100] "GET /mt/byp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:18 +0100] "GET /scripts/wpup.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:19 +0100] "GET /ba/wpup.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:19 +0100] "GET /ens/wpup.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:19 +0100] "GET /ho/wpup.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:19 +0100] "GET /para/wpup.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:20 +0100] "GET /per/wpup.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:20 +0100] "GET /update/bibil.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:20 +0100] "GET /update/wpup.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:20 +0100] "GET /update/wpupex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:21 +0100] "GET /update/wpupex.php/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:21 +0100] "GET /uploads/Casper.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:21 +0100] "GET /uploads/bypass.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:21 +0100] "GET /vendor/security.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:22 +0100] "GET /cgi-bin/byp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:22 +0100] "GET /cgi-bin/mt/byp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:22 +0100] "GET /vendor/nette/utils/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:22 +0100] "GET /queue/350070/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:23 +0100] "GET /.well-known/zip.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:23 +0100] "GET /.cache/x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:23 +0100] "GET /x/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:23 +0100] "GET /x/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:24 +0100] "GET /.tmb/554152/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:24 +0100] "GET /.trash7309/dd/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:24 +0100] "GET /.trash7309/f/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:24 +0100] "GET /.trash7309/fafa/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:25 +0100] "GET /css/smoothness/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:25 +0100] "GET /images/slide/2025/09/op4.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:25 +0100] "GET /modules/ets_whatsapp/security.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:25 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/Cyb3r.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:26 +0100] "GET /.well-known/acme-challenge/local-access.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:26 +0100] "GET /.well-known/acme-challenge/update/wpupex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:26 +0100] "GET /skin/install/default/security.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:26 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:27 +0100] "GET /wp-includes/certificates/upload.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:27 +0100] "GET /wp-includes/js/tinymce/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:27 +0100] "GET /admin/assets/img/users/bibil.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:27 +0100] "GET /assets/admin/login/info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:28 +0100] "GET /assets/filemanager/dialog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:28 +0100] "GET /assets/font/bootstrap-icon/shell.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:28 +0100] "GET /assets/js/intro/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:28 +0100] "GET /assets/plugins/gmap/dapa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:29 +0100] "GET /vul1/uploads/mybypass.png.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:29 +0100] "GET /web1/wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:29 +0100] "GET /well-known/acme-challenge/e/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:29 +0100] "GET /WordPress/x/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:30 +0100] "GET /wordpress/first.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:30 +0100] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:30 +0100] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:30 +0100] "GET /wordpress/wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:31 +0100] "GET /wordpress/wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:31 +0100] "GET /wp-2019/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:31 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:31 +0100] "GET /wp-admin/halo.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:32 +0100] "GET /wp-admin/includes/ajq1s.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:32 +0100] "GET /wp-admin/includes/ms-repository.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:32 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:32 +0100] "GET /wp-admin/user/halo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:33 +0100] "GET /wp-content/halo.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:33 +0100] "GET /wp-content/first.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:33 +0100] "GET /wp-content/ai1wm-backups/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:33 +0100] "GET /wp-content/fonts/caveat-brush/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:34 +0100] "GET /wp-content/plugins/hello-dolly/hello.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:34 +0100] "GET /wp-content/plugins/mailchimp-for-woocommerce/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:34 +0100] "GET /wp-content/plugins/majapahitslot/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:34 +0100] "GET /wp-content/plugins/ocean-portfolio/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:35 +0100] "GET /wp-content/plugins/pwnd/dapa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:35 +0100] "GET /wp-content/plugins/woocommerce/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:35 +0100] "GET /wp-content/themes/flatsome/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:35 +0100] "GET /wp-content/themes/home/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:36 +0100] "GET /wp-content/themes/oceanwp/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:36 +0100] "GET /wp-content/themes/twentytwentyfour/assets/css/geido.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:36 +0100] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:36 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:37 +0100] "GET /wp-content/updraft/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:37 +0100] "GET /wp-content/upgrade-temp-backup/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:37 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:37 +0100] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:38 +0100] "GET /wp-content/uploads/Ipv6.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:38 +0100] "GET /wp-includes/Ipv6.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:38 +0100] "GET /wp-includes/IXR/Ipv6.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:38 +0100] "GET /wp-includes/IXR/4pgwp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:39 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:39 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:39 +0100] "GET /wp-includes/pomo/mail.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:39 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:40 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:40 +0100] "GET /wp-includes/rest-api/menu.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:40 +0100] "GET /wp-includes/sitemaps/Ipv6.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:40 +0100] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:41 +0100] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:41 +0100] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:41 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:42 +0100] "GET /wp-includes/IXR/options.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:42 +0100] "GET /wp-includes/PHPMailer/8bmaeS.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:42 +0100] "GET /wp-includes/PHPMailer/BIBIL_0DAY.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:42 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:43 +0100] "GET /wp-includes/Requests/library/a1cord.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:43 +0100] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:43 +0100] "GET /wp-includes/Requests/library/upload.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:43 +0100] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:44 +0100] "GET /wp-includes/SimplePie/Content/upload.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:44 +0100] "GET /wp-includes/SimplePie/Parse/upload.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:44 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:44 +0100] "GET /wp-includes/Text/Diff/Engine/upload.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:45 +0100] "GET /wp-includes/assets/wow.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:45 +0100] "GET /wp-includes/block-bindings/UpeDL0.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:45 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:45 +0100] "GET /wp-includes/block-supports/input.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:46 +0100] "GET /wp-includes/blocks/buttons/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:46 +0100] "GET /wp-includes/blocks/comments-title/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:46 +0100] "GET /wp-includes/blocks/details/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:46 +0100] "GET /wp-includes/blocks/file/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:47 +0100] "GET /wp-includes/blocks/freeform/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:47 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:47 +0100] "GET /wp-includes/blocks/list-item/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:47 +0100] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:48 +0100] "GET /wp-includes/blocks/missing/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:48 +0100] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:48 +0100] "GET /wp-includes/blocks/paragraph/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:48 +0100] "GET /wp-includes/blocks/post-comments-form/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:49 +0100] "GET /wp-includes/blocks/post-date/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:49 +0100] "GET /wp-includes/blocks/post-terms/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:49 +0100] "GET /wp-includes/blocks/pullquote/windex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:49 +0100] "GET /wp-includes/blocks/read-more/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:50 +0100] "GET /wp-includes/blocks/search/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:50 +0100] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:50 +0100] "GET /wp-includes/blocks/social-link/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:50 +0100] "GET /wp-includes/blocks/text-columns/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:51 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:51 +0100] "GET /wp-includes/class-wp-theme-json-schema-variable.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:51 +0100] "GET /wp-includes/css/dist/block-directory/upload.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:51 +0100] "GET /wp-includes/html-api/wp-load.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:52 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:52 +0100] "GET /wp-includes/images/wp-load.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:52 +0100] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:52 +0100] "GET /wp-includes/js/plupload/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.120 - - [04/Jan/2026:01:24:53 +0100] "GET /wp-includes/js/thickbox/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:53 +0100] "GET /wp-includes/php-compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:53 +0100] "GET /wp-includes/theme-previews-exception.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.120 - - [04/Jan/2026:01:24:53 +0100] "GET /wp/wp-content/plugins/classic-editor/js/geido.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.120 - - [04/Jan/2026:01:24:54 +0100] "GET /wp/wp-content/themes/twentytwentyfour/assets/css/geido.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.10.40 - - [04/Jan/2026:02:25:15 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.71.184.207 - - [04/Jan/2026:02:26:27 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 162.159.113.171 - - [04/Jan/2026:03:52:14 +0100] "GET /media/system/js/core.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.99.77 - - [04/Jan/2026:03:52:20 +0100] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:41:59 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:00 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:01 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:01 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:01 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:02 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:02 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:03 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:03 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:03 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:04 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:04 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:05 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:06 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:06 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:07 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:07 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:08 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:08 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:09 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:09 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:10 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:10 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:10 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:11 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:11 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:12 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:12 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:12 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:13 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:13 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:14 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:14 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:14 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:15 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:15 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:16 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:17 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:17 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:17 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:18 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:18 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:19 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:19 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.98 - - [04/Jan/2026:04:42:19 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:20 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:20 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:21 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:21 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:22 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:22 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:23 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:23 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:24 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:24 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:24 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:25 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.98 - - [04/Jan/2026:04:42:25 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:26 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:26 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:26 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:27 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:28 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:28 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:28 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:29 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:29 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:30 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:30 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:31 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:31 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:31 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:32 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:32 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:33 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:33 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:33 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:34 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.98 - - [04/Jan/2026:04:42:34 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.98 - - [04/Jan/2026:04:42:35 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.191.74 - - [04/Jan/2026:05:16:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 104.23.168.109 - - [04/Jan/2026:05:54:25 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:07:19:20 +0100] "GET /0.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:21 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:21 +0100] "GET /2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:21 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:22 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:22 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:22 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:23 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:23 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:23 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:07:19:24 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:24 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:24 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:25 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:25 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:25 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:26 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:26 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:26 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:27 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:27 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:27 +0100] "GET /as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:28 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:28 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:28 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:29 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:29 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:29 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:30 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:30 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:30 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:31 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:07:19:31 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:31 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:32 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:32 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:32 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:32 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:33 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:33 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:33 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:34 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:34 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:34 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:35 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:35 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:36 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:36 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:36 +0100] "GET /link.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:07:19:37 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:37 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:37 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:38 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:38 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:38 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:39 +0100] "GET /system.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:39 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:39 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:40 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:40 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:40 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:41 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:41 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:41 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:42 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:42 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:42 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:42 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:43 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:43 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:07:19:43 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:07:19:44 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.209.46 - - [04/Jan/2026:07:34:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 172.68.103.162 - - [04/Jan/2026:07:43:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0" 172.71.198.172 - - [04/Jan/2026:09:05:09 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.46 - - [04/Jan/2026:09:05:10 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:11 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:12 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:12 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:13 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:14 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:14 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:15 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:15 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:16 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:16 +0100] "GET /install.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:17 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:17 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:18 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:18 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:19 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:20 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:20 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:21 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:21 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:22 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:22 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:23 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:24 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:24 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:25 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:25 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:26 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:26 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:27 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:27 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.172 - - [04/Jan/2026:09:05:28 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:28 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:29 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:30 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:30 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:31 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:31 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:32 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:32 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:33 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:33 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:34 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:35 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:35 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:36 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:36 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.172 - - [04/Jan/2026:09:05:37 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:37 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:38 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:38 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:39 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:39 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:40 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.172 - - [04/Jan/2026:09:05:41 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:41 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:42 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:42 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:43 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:43 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:44 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:44 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:45 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:46 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:46 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:47 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:47 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:48 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:48 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:49 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:49 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:50 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:50 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:51 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:52 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:52 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:53 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.172 - - [04/Jan/2026:09:05:53 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.172 - - [04/Jan/2026:09:05:54 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.245.186 - - [04/Jan/2026:09:59:21 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" 172.69.130.114 - - [04/Jan/2026:10:05:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0" 104.23.217.47 - - [04/Jan/2026:11:10:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 104.23.241.97 - - [04/Jan/2026:12:21:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.70.131.170 - - [04/Jan/2026:12:27:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 162.158.39.199 - - [04/Jan/2026:13:04:49 +0100] "GET /dapa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:50 +0100] "GET /first.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:51 +0100] "GET /myy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:51 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:51 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:52 +0100] "GET /security.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:52 +0100] "GET /spip.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:52 +0100] "GET /Ipv6.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:53 +0100] "GET /geido.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:53 +0100] "GET /halo.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:53 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:54 +0100] "GET /Cachex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:54 +0100] "GET /rezor.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:54 +0100] "GET /byp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:55 +0100] "GET /bypass.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:55 +0100] "GET /bibil.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:55 +0100] "GET /wpupex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:56 +0100] "GET /CasperSecurity.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:56 +0100] "GET /test/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:56 +0100] "GET /test/lm.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:57 +0100] "GET /tmp/security.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:57 +0100] "GET /images/security.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:58 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:58 +0100] "GET /first/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:58 +0100] "GET /fonts/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:59 +0100] "GET /filemanager/world.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:04:59 +0100] "GET /MTOS/byp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:04:59 +0100] "GET /blog/byp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:00 +0100] "GET /cms/byp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:00 +0100] "GET /mt/byp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:00 +0100] "GET /scripts/wpup.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:01 +0100] "GET /ba/wpup.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:01 +0100] "GET /ens/wpup.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:01 +0100] "GET /ho/wpup.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:02 +0100] "GET /para/wpup.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:02 +0100] "GET /per/wpup.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:02 +0100] "GET /update/bibil.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:03 +0100] "GET /update/wpup.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:03 +0100] "GET /update/wpupex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [04/Jan/2026:13:05:03 +0100] "GET /update/wpupex.php/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:04 +0100] "GET /uploads/Casper.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:04 +0100] "GET /uploads/bypass.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:04 +0100] "GET /vendor/security.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:05 +0100] "GET /cgi-bin/byp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:05 +0100] "GET /cgi-bin/mt/byp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:05 +0100] "GET /vendor/nette/utils/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:06 +0100] "GET /queue/350070/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:06 +0100] "GET /.well-known/zip.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:06 +0100] "GET /.cache/x.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:07 +0100] "GET /x/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:07 +0100] "GET /x/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:08 +0100] "GET /.tmb/554152/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:08 +0100] "GET /.trash7309/dd/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:08 +0100] "GET /.trash7309/f/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:09 +0100] "GET /.trash7309/fafa/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:09 +0100] "GET /css/smoothness/images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:09 +0100] "GET /images/slide/2025/09/op4.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:10 +0100] "GET /modules/ets_whatsapp/security.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:10 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/Cyb3r.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:10 +0100] "GET /.well-known/acme-challenge/local-access.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:11 +0100] "GET /.well-known/acme-challenge/update/wpupex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:11 +0100] "GET /skin/install/default/security.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:11 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:12 +0100] "GET /wp-includes/certificates/upload.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:12 +0100] "GET /wp-includes/js/tinymce/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:12 +0100] "GET /admin/assets/img/users/bibil.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:13 +0100] "GET /assets/admin/login/info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:13 +0100] "GET /assets/filemanager/dialog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:13 +0100] "GET /assets/font/bootstrap-icon/shell.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [04/Jan/2026:13:05:14 +0100] "GET /assets/js/intro/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [04/Jan/2026:13:05:14 +0100] "GET /assets/plugins/gmap/dapa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:14 +0100] "GET /vul1/uploads/mybypass.png.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:15 +0100] "GET /web1/wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:15 +0100] "GET /well-known/acme-challenge/e/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:15 +0100] "GET /WordPress/x/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:16 +0100] "GET /wordpress/first.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:16 +0100] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:16 +0100] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:17 +0100] "GET /wordpress/wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:17 +0100] "GET /wordpress/wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:17 +0100] "GET /wp-2019/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:18 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:18 +0100] "GET /wp-admin/halo.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:18 +0100] "GET /wp-admin/includes/ajq1s.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:19 +0100] "GET /wp-admin/includes/ms-repository.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:19 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:19 +0100] "GET /wp-admin/user/halo.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:20 +0100] "GET /wp-content/halo.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:20 +0100] "GET /wp-content/first.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:20 +0100] "GET /wp-content/ai1wm-backups/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:21 +0100] "GET /wp-content/fonts/caveat-brush/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:21 +0100] "GET /wp-content/plugins/hello-dolly/hello.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:21 +0100] "GET /wp-content/plugins/mailchimp-for-woocommerce/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:22 +0100] "GET /wp-content/plugins/majapahitslot/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:22 +0100] "GET /wp-content/plugins/ocean-portfolio/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:23 +0100] "GET /wp-content/plugins/pwnd/dapa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:23 +0100] "GET /wp-content/plugins/woocommerce/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:23 +0100] "GET /wp-content/themes/flatsome/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:24 +0100] "GET /wp-content/themes/home/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:24 +0100] "GET /wp-content/themes/oceanwp/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:24 +0100] "GET /wp-content/themes/twentytwentyfour/assets/css/geido.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:25 +0100] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:25 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:25 +0100] "GET /wp-content/updraft/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:26 +0100] "GET /wp-content/upgrade-temp-backup/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:26 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:26 +0100] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:27 +0100] "GET /wp-content/uploads/Ipv6.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [04/Jan/2026:13:05:27 +0100] "GET /wp-includes/Ipv6.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:27 +0100] "GET /wp-includes/IXR/Ipv6.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:28 +0100] "GET /wp-includes/IXR/4pgwp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:28 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:28 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:29 +0100] "GET /wp-includes/pomo/mail.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:29 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:29 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:30 +0100] "GET /wp-includes/rest-api/menu.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:30 +0100] "GET /wp-includes/sitemaps/Ipv6.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:30 +0100] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:31 +0100] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:31 +0100] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:31 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:32 +0100] "GET /wp-includes/IXR/options.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:32 +0100] "GET /wp-includes/PHPMailer/8bmaeS.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [04/Jan/2026:13:05:32 +0100] "GET /wp-includes/PHPMailer/BIBIL_0DAY.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:33 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:33 +0100] "GET /wp-includes/Requests/library/a1cord.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:33 +0100] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:34 +0100] "GET /wp-includes/Requests/library/upload.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:34 +0100] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:34 +0100] "GET /wp-includes/SimplePie/Content/upload.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:35 +0100] "GET /wp-includes/SimplePie/Parse/upload.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:35 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:35 +0100] "GET /wp-includes/Text/Diff/Engine/upload.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:36 +0100] "GET /wp-includes/assets/wow.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:36 +0100] "GET /wp-includes/block-bindings/UpeDL0.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:36 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:37 +0100] "GET /wp-includes/block-supports/input.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:37 +0100] "GET /wp-includes/blocks/buttons/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:37 +0100] "GET /wp-includes/blocks/comments-title/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:38 +0100] "GET /wp-includes/blocks/details/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:38 +0100] "GET /wp-includes/blocks/file/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:39 +0100] "GET /wp-includes/blocks/freeform/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:39 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:39 +0100] "GET /wp-includes/blocks/list-item/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:40 +0100] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:40 +0100] "GET /wp-includes/blocks/missing/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:40 +0100] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:41 +0100] "GET /wp-includes/blocks/paragraph/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:41 +0100] "GET /wp-includes/blocks/post-comments-form/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:41 +0100] "GET /wp-includes/blocks/post-date/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:42 +0100] "GET /wp-includes/blocks/post-terms/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:42 +0100] "GET /wp-includes/blocks/pullquote/windex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:42 +0100] "GET /wp-includes/blocks/read-more/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:43 +0100] "GET /wp-includes/blocks/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:43 +0100] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:43 +0100] "GET /wp-includes/blocks/social-link/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:44 +0100] "GET /wp-includes/blocks/text-columns/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:44 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:44 +0100] "GET /wp-includes/class-wp-theme-json-schema-variable.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:45 +0100] "GET /wp-includes/css/dist/block-directory/upload.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:45 +0100] "GET /wp-includes/html-api/wp-load.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:45 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:46 +0100] "GET /wp-includes/images/wp-load.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:46 +0100] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:46 +0100] "GET /wp-includes/js/plupload/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:47 +0100] "GET /wp-includes/js/thickbox/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:47 +0100] "GET /wp-includes/php-compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:47 +0100] "GET /wp-includes/theme-previews-exception.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [04/Jan/2026:13:05:48 +0100] "GET /wp/wp-content/plugins/classic-editor/js/geido.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [04/Jan/2026:13:05:48 +0100] "GET /wp/wp-content/themes/twentytwentyfour/assets/css/geido.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:27 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:28 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:28 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:29 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:29 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:29 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:30 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:30 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:30 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:31 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:31 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:32 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:13:10:32 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:32 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:13:10:33 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:33 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:13:10:33 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:34 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:34 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:34 +0100] "GET /app.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:35 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:35 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:35 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:13:10:36 +0100] "GET /c.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:13:10:36 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:36 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:37 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:37 +0100] "GET /config.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:37 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:38 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:38 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:38 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:38 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:39 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:39 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:39 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:40 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:40 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:13:10:40 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:41 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:13:10:41 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:41 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:42 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:42 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:43 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:43 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:43 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:43 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:44 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:44 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:44 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:45 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:45 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:13:10:45 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:46 +0100] "GET /system.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:46 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:46 +0100] "GET /test.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [04/Jan/2026:13:10:47 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:47 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:47 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:48 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:48 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:48 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:49 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:49 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:49 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:50 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [04/Jan/2026:13:10:50 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:50 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:51 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [04/Jan/2026:13:10:51 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:38 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:39 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [04/Jan/2026:13:26:40 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:40 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:41 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:42 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:42 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:43 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:43 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:44 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:44 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:45 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:45 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:46 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:46 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:47 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:48 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:48 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:49 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:49 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:50 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:50 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:51 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:52 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:52 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:53 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [04/Jan/2026:13:26:53 +0100] "GET /black.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:54 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:54 +0100] "GET /php.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:55 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:55 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:56 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:57 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:57 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:26:58 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:58 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:59 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:26:59 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:00 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:00 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:01 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:02 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:02 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:03 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:03 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:04 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:04 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:05 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:05 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:06 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:07 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:07 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:08 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:08 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:09 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:09 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:10 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:10 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:11 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:12 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:12 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:13 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:13 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:14 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:14 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:15 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:15 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:16 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:17 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:17 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:18 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:18 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [04/Jan/2026:13:27:19 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:19 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:20 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:20 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:21 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:22 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [04/Jan/2026:13:27:22 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [04/Jan/2026:13:27:23 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.195.72 - - [04/Jan/2026:13:27:24 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.223.111 - - [04/Jan/2026:14:19:59 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.223.111 - - [04/Jan/2026:14:20:58 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.103.106 - - [04/Jan/2026:15:17:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.95.95 - - [04/Jan/2026:15:17:23 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.69.138.48 - - [04/Jan/2026:16:04:21 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:17 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:22 +0100] "GET /ca4.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:23 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:23 +0100] "GET /inwp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:23 +0100] "GET /file22.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:24 +0100] "GET /7logs.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:24 +0100] "GET /tanjiro.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:24 +0100] "GET /wefile.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:25 +0100] "GET /ad1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:25 +0100] "GET /bjfl.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:26 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:26 +0100] "GET /anz.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:26 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:27 +0100] "GET /motu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:27 +0100] "GET /file66.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:27 +0100] "GET /kure.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:28 +0100] "GET /gaje.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:28 +0100] "GET /blnux.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:28 +0100] "GET /fgd.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:29 +0100] "GET /msy.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:29 +0100] "GET /alog.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:29 +0100] "GET /X7T6.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:30 +0100] "GET /xwpg.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:30 +0100] "GET /Rk41.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:30 +0100] "GET /ztv.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:31 +0100] "GET /sef.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [04/Jan/2026:17:21:31 +0100] "GET /155.php HTTP/1.1" 301 162 "-" "-" 172.70.42.179 - - [04/Jan/2026:17:27:36 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.1.199 - - [04/Jan/2026:17:51:05 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.69.169.226 - - [04/Jan/2026:18:11:37 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [04/Jan/2026:18:11:38 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [04/Jan/2026:18:11:38 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [04/Jan/2026:18:11:38 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [04/Jan/2026:18:11:38 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.204 - - [04/Jan/2026:18:11:39 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.204 - - [04/Jan/2026:18:11:39 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [04/Jan/2026:18:11:39 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.204 - - [04/Jan/2026:18:11:40 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:40 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:40 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:40 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:41 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:41 +0100] "GET /aw.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:41 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:41 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:42 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:42 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:42 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:42 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:43 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:43 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [04/Jan/2026:18:11:43 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:44 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:44 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:44 +0100] "GET /o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:44 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:45 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:45 +0100] "GET /wp-admin/a.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:45 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:45 +0100] "GET /wp-admin/css/colors HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:46 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:46 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:46 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:46 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:47 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [04/Jan/2026:18:11:47 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:47 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:47 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:48 +0100] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:48 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:48 +0100] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:48 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:49 +0100] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:49 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:49 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:49 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:50 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:50 +0100] "GET /wp-includes/SimplePie/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:50 +0100] "GET /wp-includes/SimplePie/wrapper.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:50 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:51 +0100] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:51 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:51 +0100] "GET /wp-includes/assets/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:51 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:52 +0100] "GET /wp-includes/block-patterns/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [04/Jan/2026:18:11:52 +0100] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:52 +0100] "GET /wp-includes/block-supports/alfa-rex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:53 +0100] "GET /wp-includes/block-supports/input.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:53 +0100] "GET /wp-includes/block-supports/options.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:53 +0100] "GET /wp-includes/blocks/navigation-submenu/wp/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:53 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:54 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:54 +0100] "GET /wp-includes/certificates/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:54 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:54 +0100] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:55 +0100] "GET /wp-includes/css/dist/wp/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:55 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:55 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:55 +0100] "GET /wp-includes/customize/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:56 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:56 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:56 +0100] "GET /wp-includes/fonts/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:56 +0100] "GET /wp-includes/fonts/menu.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:57 +0100] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:57 +0100] "GET /wp-includes/html-api/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:57 +0100] "GET /wp-includes/images/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:57 +0100] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:58 +0100] "GET /wp-includes/js/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:58 +0100] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:58 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:58 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:59 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:11:59 +0100] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:59 +0100] "GET /wp-includes/random_compat/alfa-rex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:11:59 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.226 - - [04/Jan/2026:18:12:00 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:00 +0100] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:12:00 +0100] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:12:01 +0100] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:01 +0100] "GET /wp-includes/sitemaps/wp-load.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:12:01 +0100] "GET /wp-includes/sitemaps/wp/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:01 +0100] "GET /wp-includes/sodium_compat/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:12:02 +0100] "GET /wp-includes/sodium_compat/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:02 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:02 +0100] "GET /wp-includes/style-engine/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:03 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:03 +0100] "GET /wp-includes/theme-compat/alfa-rex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:03 +0100] "GET /wp-includes/theme-compat/input.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:03 +0100] "GET /wp-includes/theme-compat/wp/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:12:04 +0100] "GET /wp-includes/themes7.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:12:04 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.226 - - [04/Jan/2026:18:12:04 +0100] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.226 - - [04/Jan/2026:18:12:04 +0100] "GET /wp-includes/widgets/wp-load.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.217.21 - - [04/Jan/2026:18:36:22 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.64.217.141 - - [04/Jan/2026:18:36:22 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.64.217.141 - - [04/Jan/2026:18:36:22 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.64.217.141 - - [04/Jan/2026:18:36:22 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.64.217.141 - - [04/Jan/2026:18:36:22 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.64.217.141 - - [04/Jan/2026:18:36:22 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.64.217.141 - - [04/Jan/2026:18:36:22 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.68.175.31 - - [04/Jan/2026:18:50:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FSL 7.0.6.01001)" 172.71.8.78 - - [04/Jan/2026:18:56:41 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.57 - - [04/Jan/2026:18:56:42 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.57 - - [04/Jan/2026:18:56:42 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.57 - - [04/Jan/2026:18:56:43 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.57 - - [04/Jan/2026:18:56:43 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:43 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:43 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:44 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:44 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:44 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:44 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:45 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:45 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:45 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:45 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:46 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:46 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:46 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:46 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:47 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:47 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:47 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:47 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [04/Jan/2026:18:56:47 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:48 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:48 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:48 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:49 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:49 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:49 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [04/Jan/2026:18:56:49 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:50 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.8.78 - - [04/Jan/2026:18:56:50 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:50 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:50 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:51 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:51 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:51 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:51 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:52 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:52 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:52 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:52 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:52 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:53 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:53 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:53 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:53 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:54 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:54 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.8.78 - - [04/Jan/2026:18:56:54 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.8.78 - - [04/Jan/2026:18:56:54 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [04/Jan/2026:19:23:23 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.143.187 - - [04/Jan/2026:21:13:45 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.71.148.123 - - [04/Jan/2026:21:18:00 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.70.250.219 - - [04/Jan/2026:21:19:49 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.221.12 - - [04/Jan/2026:22:32:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.118.244 - - [04/Jan/2026:22:43:06 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.76 - - [04/Jan/2026:22:43:06 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [04/Jan/2026:22:43:07 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:07 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:07 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:07 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:08 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:08 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:08 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:08 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:09 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:09 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:09 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:10 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:10 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:10 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:10 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:11 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:11 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:11 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:11 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:12 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:12 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:12 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:12 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [04/Jan/2026:22:43:12 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:13 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:13 +0100] "GET /o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:13 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:13 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:14 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:14 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:14 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:14 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:15 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:15 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:15 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:15 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:16 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:16 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [04/Jan/2026:22:43:16 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:16 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [04/Jan/2026:22:43:17 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:17 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:17 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:17 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:18 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:18 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [04/Jan/2026:22:43:18 +0100] "GET /wp-admin/s.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:18 +0100] "GET /wp-admin/w.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [04/Jan/2026:22:43:19 +0100] "GET /wp-admin/z.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:32 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:33 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:33 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.199 - - [04/Jan/2026:22:57:34 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [04/Jan/2026:22:57:34 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.199 - - [04/Jan/2026:22:57:34 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [04/Jan/2026:22:57:35 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [04/Jan/2026:22:57:35 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.199 - - [04/Jan/2026:22:57:35 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [04/Jan/2026:22:57:36 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [04/Jan/2026:22:57:36 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.199 - - [04/Jan/2026:22:57:36 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.199 - - [04/Jan/2026:22:57:37 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [04/Jan/2026:22:57:37 +0100] "GET /aw.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.199 - - [04/Jan/2026:22:57:37 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:38 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:38 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:38 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:39 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:39 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:39 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:40 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:40 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:40 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:41 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:41 +0100] "GET /o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:41 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:42 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:42 +0100] "GET /wp-admin/a.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:42 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:43 +0100] "GET /wp-admin/css/colors HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:43 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:43 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:44 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:44 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:44 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:45 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [04/Jan/2026:22:57:45 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:45 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:46 +0100] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:46 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:46 +0100] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:47 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:47 +0100] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:47 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:47 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:48 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:48 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:48 +0100] "GET /wp-includes/SimplePie/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:49 +0100] "GET /wp-includes/SimplePie/wrapper.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:49 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:49 +0100] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:50 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:50 +0100] "GET /wp-includes/assets/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:50 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:51 +0100] "GET /wp-includes/block-patterns/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:51 +0100] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:51 +0100] "GET /wp-includes/block-supports/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:52 +0100] "GET /wp-includes/block-supports/input.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:52 +0100] "GET /wp-includes/block-supports/options.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:52 +0100] "GET /wp-includes/blocks/navigation-submenu/wp/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:53 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:53 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:53 +0100] "GET /wp-includes/certificates/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [04/Jan/2026:22:57:54 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:54 +0100] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:54 +0100] "GET /wp-includes/css/dist/wp/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:55 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [04/Jan/2026:22:57:55 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:55 +0100] "GET /wp-includes/customize/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [04/Jan/2026:22:57:56 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:56 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:56 +0100] "GET /wp-includes/fonts/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:57 +0100] "GET /wp-includes/fonts/menu.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:57 +0100] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:57 +0100] "GET /wp-includes/html-api/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [04/Jan/2026:22:57:58 +0100] "GET /wp-includes/images/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [04/Jan/2026:22:57:58 +0100] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:58 +0100] "GET /wp-includes/js/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:59 +0100] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:57:59 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:57:59 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:00 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:58:00 +0100] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:00 +0100] "GET /wp-includes/random_compat/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:58:01 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:01 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:01 +0100] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:58:02 +0100] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:02 +0100] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:58:02 +0100] "GET /wp-includes/sitemaps/wp-load.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:03 +0100] "GET /wp-includes/sitemaps/wp/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:58:03 +0100] "GET /wp-includes/sodium_compat/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:58:03 +0100] "GET /wp-includes/sodium_compat/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:58:04 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:04 +0100] "GET /wp-includes/style-engine/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:04 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:05 +0100] "GET /wp-includes/theme-compat/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:05 +0100] "GET /wp-includes/theme-compat/input.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:58:05 +0100] "GET /wp-includes/theme-compat/wp/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [04/Jan/2026:22:58:06 +0100] "GET /wp-includes/themes7.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:06 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:06 +0100] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [04/Jan/2026:22:58:07 +0100] "GET /wp-includes/widgets/wp-load.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.246.156 - - [04/Jan/2026:22:59:11 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 108.162.246.156 - - [04/Jan/2026:22:59:11 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 108.162.246.156 - - [04/Jan/2026:22:59:11 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 108.162.246.156 - - [04/Jan/2026:22:59:11 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 108.162.246.156 - - [04/Jan/2026:22:59:11 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 108.162.246.156 - - [04/Jan/2026:22:59:11 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 108.162.246.156 - - [04/Jan/2026:22:59:11 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 162.158.183.69 - - [05/Jan/2026:00:34:01 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 104.23.223.111 - - [05/Jan/2026:00:34:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 172.69.94.118 - - [05/Jan/2026:00:58:56 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:58:57 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:58:58 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:58:59 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:58:59 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:00 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:01 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:01 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:02 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:02 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:03 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:03 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:04 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:04 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:05 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:05 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:06 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:07 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:07 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:08 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:08 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:09 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:09 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:10 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:10 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:11 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:11 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:12 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:13 +0100] "GET /config.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [05/Jan/2026:00:59:13 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:14 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [05/Jan/2026:00:59:14 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:15 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:15 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:16 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:16 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:17 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:18 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:18 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:19 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [05/Jan/2026:00:59:19 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:20 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:20 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:21 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:21 +0100] "GET /index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:22 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:23 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:23 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:24 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:24 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:25 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:25 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:26 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:26 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:27 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:27 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:28 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:29 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:29 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:30 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:30 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:31 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:31 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [05/Jan/2026:00:59:32 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:32 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:33 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:33 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:34 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [05/Jan/2026:00:59:35 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:35 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [05/Jan/2026:00:59:36 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [05/Jan/2026:00:59:36 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.221.12 - - [05/Jan/2026:01:23:25 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 162.159.120.251 - - [05/Jan/2026:02:10:39 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.147.174 - - [05/Jan/2026:02:13:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.134.113 - - [05/Jan/2026:03:37:44 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.119.63 - - [05/Jan/2026:03:37:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.110.130 - - [05/Jan/2026:05:15:44 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:45 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:45 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:46 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:46 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:46 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:47 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:47 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:47 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:48 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:48 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:48 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:49 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:49 +0100] "GET /aw.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:49 +0100] "GET /bb.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:50 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:50 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [05/Jan/2026:05:15:50 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:51 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:51 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:51 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:52 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:52 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:52 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:52 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:53 +0100] "GET /o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:53 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:53 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:54 +0100] "GET /wp-admin/a.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:54 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:54 +0100] "GET /wp-admin/css/colors HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:55 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:55 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:55 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:56 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:56 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:56 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:57 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:57 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:57 +0100] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:58 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:58 +0100] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:58 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:59 +0100] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:15:59 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:15:59 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:00 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:00 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:00 +0100] "GET /wp-includes/SimplePie/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [05/Jan/2026:05:16:01 +0100] "GET /wp-includes/SimplePie/wrapper.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:01 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:01 +0100] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:02 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:02 +0100] "GET /wp-includes/assets/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:02 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:03 +0100] "GET /wp-includes/block-patterns/alfa-rex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:03 +0100] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:03 +0100] "GET /wp-includes/block-supports/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:04 +0100] "GET /wp-includes/block-supports/input.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [05/Jan/2026:05:16:04 +0100] "GET /wp-includes/block-supports/options.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:04 +0100] "GET /wp-includes/blocks/navigation-submenu/wp/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:05 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:05 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [05/Jan/2026:05:16:05 +0100] "GET /wp-includes/certificates/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:06 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:06 +0100] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:06 +0100] "GET /wp-includes/css/dist/wp/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:07 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:07 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:07 +0100] "GET /wp-includes/customize/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:08 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:08 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:08 +0100] "GET /wp-includes/fonts/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:09 +0100] "GET /wp-includes/fonts/menu.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:09 +0100] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [05/Jan/2026:05:16:09 +0100] "GET /wp-includes/html-api/alfa-rex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:09 +0100] "GET /wp-includes/images/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:10 +0100] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:10 +0100] "GET /wp-includes/js/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:10 +0100] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:11 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:11 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:11 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:12 +0100] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:12 +0100] "GET /wp-includes/random_compat/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:12 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:13 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:13 +0100] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:13 +0100] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:14 +0100] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:14 +0100] "GET /wp-includes/sitemaps/wp-load.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:14 +0100] "GET /wp-includes/sitemaps/wp/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:15 +0100] "GET /wp-includes/sodium_compat/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:15 +0100] "GET /wp-includes/sodium_compat/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:15 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:16 +0100] "GET /wp-includes/style-engine/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:16 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:16 +0100] "GET /wp-includes/theme-compat/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:17 +0100] "GET /wp-includes/theme-compat/input.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:17 +0100] "GET /wp-includes/theme-compat/wp/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:17 +0100] "GET /wp-includes/themes7.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:18 +0100] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [05/Jan/2026:05:16:18 +0100] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [05/Jan/2026:05:16:18 +0100] "GET /wp-includes/widgets/wp-load.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.232.81 - - [05/Jan/2026:05:33:57 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.130.205 - - [05/Jan/2026:05:33:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.160.36 - - [05/Jan/2026:05:40:36 +0100] "GET /userfuns.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.220.23 - - [05/Jan/2026:08:01:34 +0100] "GET /txets.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.194.149 - - [05/Jan/2026:09:14:32 +0100] "GET /media/system/js/core.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.69.6.29 - - [05/Jan/2026:09:14:36 +0100] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.23.221.13 - - [05/Jan/2026:09:27:31 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.223.111 - - [05/Jan/2026:09:27:31 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.107.4 - - [05/Jan/2026:09:36:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.108.91 - - [05/Jan/2026:09:37:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.164.36 - - [05/Jan/2026:09:37:02 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 172.68.164.76 - - [05/Jan/2026:09:37:04 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.68.164.76 - - [05/Jan/2026:09:37:04 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.68.164.76 - - [05/Jan/2026:09:37:04 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.68.164.76 - - [05/Jan/2026:09:37:05 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.68.164.76 - - [05/Jan/2026:09:37:05 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.68.164.76 - - [05/Jan/2026:09:37:06 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 172.68.164.76 - - [05/Jan/2026:09:37:07 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.68.164.76 - - [05/Jan/2026:09:37:07 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.71.110.131 - - [05/Jan/2026:09:58:30 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.111.7 - - [05/Jan/2026:09:58:31 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:31 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:31 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:32 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:32 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:32 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:33 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:33 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:33 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:34 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:34 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:34 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:35 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:35 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:35 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:36 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:36 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [05/Jan/2026:09:58:36 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:37 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:37 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:37 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:38 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:38 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:38 +0100] "GET /c.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:39 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:39 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:39 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:40 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:40 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:40 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:41 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:41 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:41 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:42 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:42 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:42 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:43 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:43 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:43 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:44 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:44 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:44 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:45 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:45 +0100] "GET /index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:45 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:46 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:46 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:46 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:47 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:47 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:47 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:48 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:48 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:49 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:49 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:49 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:49 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:50 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:50 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:50 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:51 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:51 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:51 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:52 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:52 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:53 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:53 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:53 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:53 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:09:58:54 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:09:58:54 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.42.179 - - [05/Jan/2026:12:47:47 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.175.165 - - [05/Jan/2026:12:47:47 +0100] "GET /details.php?post_id=1&v=Favorite HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.122 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.49.201 - - [05/Jan/2026:13:14:07 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:07 +0100] "GET /ca4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:08 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:08 +0100] "GET /inwp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:09 +0100] "GET /file22.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:09 +0100] "GET /7logs.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:09 +0100] "GET /tanjiro.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:10 +0100] "GET /wefile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:10 +0100] "GET /ad1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:10 +0100] "GET /bjfl.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:11 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:11 +0100] "GET /anz.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:11 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:12 +0100] "GET /motu.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:12 +0100] "GET /file66.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:12 +0100] "GET /kure.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:12 +0100] "GET /gaje.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:13 +0100] "GET /blnux.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:13 +0100] "GET /fgd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:13 +0100] "GET /msy.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:14 +0100] "GET /alog.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:14 +0100] "GET /X7T6.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:14 +0100] "GET /xwpg.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:15 +0100] "GET /Rk41.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:15 +0100] "GET /ztv.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:15 +0100] "GET /sef.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [05/Jan/2026:13:14:16 +0100] "GET /155.php HTTP/1.1" 301 162 "-" "-" 172.70.42.179 - - [05/Jan/2026:14:56:05 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.138.238 - - [05/Jan/2026:14:57:36 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.198 - - [05/Jan/2026:14:57:37 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.198 - - [05/Jan/2026:14:57:38 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:38 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:38 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:39 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:39 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:39 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:40 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:40 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:40 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:41 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:41 +0100] "GET /num.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:41 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:42 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:42 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:42 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:43 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:43 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:43 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:44 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:44 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:44 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:45 +0100] "GET /as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:45 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:45 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:46 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:46 +0100] "GET /o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:46 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:47 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:47 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:47 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:48 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:48 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:48 +0100] "GET /wp-content/k.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:49 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:49 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:49 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:50 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:50 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:50 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:51 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:51 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:51 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:52 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:52 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:52 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:53 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [05/Jan/2026:14:57:53 +0100] "GET /wp-admin/s.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:53 +0100] "GET /wp-admin/w.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [05/Jan/2026:14:57:54 +0100] "GET /wp-admin/z.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.120.250 - - [05/Jan/2026:15:21:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.42.143 - - [05/Jan/2026:15:27:39 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.241.112 - - [05/Jan/2026:15:31:14 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.70.163.124 - - [05/Jan/2026:15:31:14 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 162.158.182.192 - - [05/Jan/2026:15:34:07 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.223.111 - - [05/Jan/2026:15:35:03 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.221.12 - - [05/Jan/2026:15:36:50 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.22.1.198 - - [05/Jan/2026:16:12:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.69.87.95 - - [05/Jan/2026:16:17:46 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.10 - - [05/Jan/2026:16:17:48 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:48 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:49 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:50 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [05/Jan/2026:16:17:50 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:51 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:51 +0100] "GET /admin/controller/extension/extension/jnweppgp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:17:52 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:53 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:17:53 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:54 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:17:55 +0100] "GET /css/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:17:55 +0100] "GET /db.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:56 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:56 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:57 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:17:58 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:17:58 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:17:59 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:00 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:00 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:01 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:02 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:02 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:03 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:03 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:04 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:05 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:05 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:06 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:07 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:07 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:08 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:08 +0100] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:09 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:10 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:10 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:11 +0100] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:12 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:12 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:13 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:13 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:14 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:15 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:15 +0100] "GET /wp-fclass.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:16 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:17 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:17 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [05/Jan/2026:16:18:18 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:18 +0100] "GET /wp-includes/Requests/src/Cookie/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:19 +0100] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:20 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:20 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:21 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:22 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:22 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:23 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:24 +0100] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [05/Jan/2026:16:18:24 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:25 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:25 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:26 +0100] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:27 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:27 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [05/Jan/2026:16:18:28 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.154.84 - - [05/Jan/2026:17:58:55 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 172.70.42.162 - - [05/Jan/2026:18:11:55 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 162.158.152.183 - - [05/Jan/2026:18:11:56 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 162.158.152.183 - - [05/Jan/2026:18:11:56 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 162.158.152.183 - - [05/Jan/2026:18:11:56 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 162.158.152.183 - - [05/Jan/2026:18:11:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 162.158.152.183 - - [05/Jan/2026:18:11:57 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 162.158.152.183 - - [05/Jan/2026:18:11:57 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:00 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:01 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:02 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:02 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:02 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:03 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:03 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:04 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:04 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:04 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:05 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:05 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:06 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:06 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:07 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:07 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:07 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:08 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:08 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:09 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:09 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:09 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:10 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:10 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:11 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.166.99 - - [05/Jan/2026:19:12:11 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:12 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:12 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:12 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:13 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:13 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:14 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:14 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:14 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:15 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:15 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:16 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:16 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:16 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:17 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:17 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:18 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:18 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:18 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:19 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:19 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:20 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:20 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:20 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:21 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.166.99 - - [05/Jan/2026:19:12:21 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.166.99 - - [05/Jan/2026:19:12:22 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.217.46 - - [05/Jan/2026:20:42:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g" 108.162.249.114 - - [05/Jan/2026:21:44:33 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [05/Jan/2026:21:44:34 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.68 - - [05/Jan/2026:21:44:34 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:34 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:35 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:35 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:35 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:36 +0100] "GET /admin/controller/extension/extension/jnweppgp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:36 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:36 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:37 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:37 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:37 +0100] "GET /css/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:38 +0100] "GET /db.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:38 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:38 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:39 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:39 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:39 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:40 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:40 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:40 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:41 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:41 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:41 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:42 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:42 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:42 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:43 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:43 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:43 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:44 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:44 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:44 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:45 +0100] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:45 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:45 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:46 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:46 +0100] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:46 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:47 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:47 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [05/Jan/2026:21:44:47 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:48 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:48 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:48 +0100] "GET /wp-fclass.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:49 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:49 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:49 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:50 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:50 +0100] "GET /wp-includes/Requests/src/Cookie/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:50 +0100] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:51 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:51 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:52 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:52 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:52 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:53 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:53 +0100] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:53 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:54 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:54 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:54 +0100] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:55 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [05/Jan/2026:21:44:55 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [05/Jan/2026:21:44:55 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.35.168 - - [05/Jan/2026:22:00:04 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.68.35.95 - - [05/Jan/2026:22:00:05 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.35.95 - - [05/Jan/2026:22:00:05 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.68.35.95 - - [05/Jan/2026:22:00:05 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.68.35.95 - - [05/Jan/2026:22:00:05 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 172.68.35.95 - - [05/Jan/2026:22:00:05 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.35.95 - - [05/Jan/2026:22:00:05 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.71.184.207 - - [05/Jan/2026:22:37:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.91.105 - - [05/Jan/2026:22:46:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:16 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.111.8 - - [05/Jan/2026:22:54:17 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.111.8 - - [05/Jan/2026:22:54:17 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.111.8 - - [05/Jan/2026:22:54:18 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [05/Jan/2026:22:54:18 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:18 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:19 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:19 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:19 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:20 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:20 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:20 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:21 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:21 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:21 +0100] "GET /item.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:21 +0100] "GET /load.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:22 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:23 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [05/Jan/2026:22:54:23 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:23 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:24 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:24 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:24 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:25 +0100] "GET /form.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [05/Jan/2026:22:54:25 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:25 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:25 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [05/Jan/2026:22:54:26 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:26 +0100] "GET /aaa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:26 +0100] "GET /ava.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:27 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:27 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:28 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:28 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [05/Jan/2026:22:54:28 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:29 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:29 +0100] "GET /gmo.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:29 +0100] "GET /jp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:30 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:30 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:30 +0100] "GET /mar.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:30 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:31 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:31 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:31 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:32 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:32 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:32 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:33 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:33 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:33 +0100] "GET /block-bindings.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [05/Jan/2026:22:54:34 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:34 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:34 +0100] "GET /y.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:35 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:35 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:35 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [05/Jan/2026:22:54:36 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:36 +0100] "GET /13.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [05/Jan/2026:22:54:36 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.151.200 - - [05/Jan/2026:23:27:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.164.92 - - [05/Jan/2026:23:27:41 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.172.86 - - [05/Jan/2026:23:41:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.23.239.84 - - [05/Jan/2026:23:41:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.47.30 - - [05/Jan/2026:23:53:23 +0100] "GET / HTTP/1.1" 301 162 "-" "2ip bot/1.1 (+https://2ip.io)" 104.23.172.11 - - [05/Jan/2026:23:53:24 +0100] "GET / HTTP/1.1" 301 162 "-" "2ip bot/1.1 (+https://2ip.io)" 172.71.103.106 - - [05/Jan/2026:23:53:25 +0100] "GET / HTTP/1.1" 301 162 "-" "2ip bot/1.1 (+https://2ip.io)" 172.71.254.17 - - [06/Jan/2026:01:14:33 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 104.23.245.206 - - [06/Jan/2026:03:58:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.68.164.37 - - [06/Jan/2026:04:48:17 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.76 - - [06/Jan/2026:04:48:18 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.164.76 - - [06/Jan/2026:04:48:19 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.76 - - [06/Jan/2026:04:48:20 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.76 - - [06/Jan/2026:04:48:20 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.76 - - [06/Jan/2026:04:48:20 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.76 - - [06/Jan/2026:04:48:21 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.76 - - [06/Jan/2026:04:48:21 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.76 - - [06/Jan/2026:04:48:22 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.76 - - [06/Jan/2026:04:48:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:23 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:23 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:24 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:24 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:25 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:25 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:25 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.164.37 - - [06/Jan/2026:04:48:26 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:26 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:27 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:27 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:28 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:28 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:28 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:29 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:29 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:30 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:30 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:30 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:31 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:31 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:32 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:32 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:33 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:33 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:33 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:34 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:34 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:35 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:35 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:36 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:36 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:36 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:37 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:37 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.164.37 - - [06/Jan/2026:04:48:38 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:39 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:39 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:39 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:40 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:40 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:41 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:41 +0100] "GET /num.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:42 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:42 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:42 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:43 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:43 +0100] "GET /test.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:44 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:44 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.164.37 - - [06/Jan/2026:04:48:44 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:45 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:45 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:46 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:46 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:47 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:47 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:47 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:48 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.164.37 - - [06/Jan/2026:04:48:48 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:49 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.164.37 - - [06/Jan/2026:04:48:49 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.159.176 - - [06/Jan/2026:07:43:24 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0" 172.68.10.40 - - [06/Jan/2026:07:44:22 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.184.206 - - [06/Jan/2026:07:44:32 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.69.109.55 - - [06/Jan/2026:09:52:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 162.158.49.200 - - [06/Jan/2026:12:20:34 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:35 +0100] "GET /ca4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:35 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:36 +0100] "GET /inwp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:36 +0100] "GET /file22.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:36 +0100] "GET /7logs.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:37 +0100] "GET /tanjiro.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:37 +0100] "GET /wefile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:37 +0100] "GET /ad1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:38 +0100] "GET /bjfl.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:38 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:38 +0100] "GET /anz.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:39 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:39 +0100] "GET /motu.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:39 +0100] "GET /file66.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:40 +0100] "GET /kure.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:40 +0100] "GET /gaje.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:40 +0100] "GET /blnux.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:41 +0100] "GET /fgd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:41 +0100] "GET /msy.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:41 +0100] "GET /alog.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:42 +0100] "GET /X7T6.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:42 +0100] "GET /xwpg.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:42 +0100] "GET /Rk41.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:43 +0100] "GET /ztv.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:43 +0100] "GET /sef.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Jan/2026:12:20:43 +0100] "GET /155.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [06/Jan/2026:12:25:18 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [06/Jan/2026:12:25:29 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [06/Jan/2026:12:25:29 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [06/Jan/2026:12:25:29 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [06/Jan/2026:12:25:30 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [06/Jan/2026:12:25:30 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [06/Jan/2026:12:25:30 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [06/Jan/2026:12:25:30 +0100] "GET /ADMIN.php HTTP/1.1" 301 162 "-" "-" 104.23.221.13 - - [06/Jan/2026:13:16:23 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.70.248.60 - - [06/Jan/2026:13:17:39 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:04 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:05 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:05 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:06 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:06 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:06 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:06 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:07 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:07 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:07 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:08 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:08 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [06/Jan/2026:14:06:08 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:09 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:09 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:09 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:10 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:10 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:10 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:11 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:11 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:11 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:12 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:12 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:12 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:13 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:13 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:13 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:14 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:14 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:14 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:15 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:15 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:15 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:16 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:16 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:16 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:17 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:17 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:17 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [06/Jan/2026:14:06:18 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:18 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:18 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:19 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:19 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:19 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:20 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:20 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:20 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:21 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:21 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:21 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:22 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [06/Jan/2026:14:06:22 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:22 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:23 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:23 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:23 +0100] "GET /test.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:24 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:24 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:24 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:25 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.237 - - [06/Jan/2026:14:06:25 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:25 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:26 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:26 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:26 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:27 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:27 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.237 - - [06/Jan/2026:14:06:27 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:28 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.237 - - [06/Jan/2026:14:06:28 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.253.109 - - [06/Jan/2026:14:44:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.159.119.63 - - [06/Jan/2026:14:44:31 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.94.172 - - [06/Jan/2026:14:55:39 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.108.90 - - [06/Jan/2026:16:29:59 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.195.107 - - [06/Jan/2026:16:39:22 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.166.32 - - [06/Jan/2026:16:49:24 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.233.54 - - [06/Jan/2026:17:08:25 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.13 - - [06/Jan/2026:17:08:26 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:26 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.13 - - [06/Jan/2026:17:08:26 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:26 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.13 - - [06/Jan/2026:17:08:27 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:27 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:27 +0100] "GET /admin/controller/extension/extension/jnweppgp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:27 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.13 - - [06/Jan/2026:17:08:28 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:28 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:28 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.13 - - [06/Jan/2026:17:08:28 +0100] "GET /css/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:29 +0100] "GET /db.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:29 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.13 - - [06/Jan/2026:17:08:29 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:29 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [06/Jan/2026:17:08:30 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:30 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:30 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:30 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:31 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:31 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:31 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:32 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:32 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:32 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:32 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:33 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:33 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:33 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:33 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:34 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:34 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:34 +0100] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:35 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:35 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:35 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:35 +0100] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:36 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:36 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:36 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:36 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:37 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:37 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:37 +0100] "GET /wp-fclass.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:38 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:38 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:38 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:39 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:39 +0100] "GET /wp-includes/Requests/src/Cookie/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:39 +0100] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:39 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:40 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:40 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:40 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:40 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:41 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:41 +0100] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:41 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:41 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:42 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:42 +0100] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [06/Jan/2026:17:08:42 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:42 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [06/Jan/2026:17:08:43 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 104.23.170.73 - - [06/Jan/2026:17:44:21 +0100] "GET /phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:22 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:23 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:23 +0100] "GET /_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:23 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:24 +0100] "GET /php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:24 +0100] "GET /php_info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:24 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:25 +0100] "GET /pi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:25 +0100] "GET /config.phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:25 +0100] "GET /admin/phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:26 +0100] "GET /.aws/credentials HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:26 +0100] "GET /pinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:26 +0100] "GET /phpinfo2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:27 +0100] "GET /php_version.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:27 +0100] "GET /version.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:27 +0100] "GET /server-info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:28 +0100] "GET /env.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.170.73 - - [06/Jan/2026:17:44:28 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.68.118.139 - - [06/Jan/2026:18:49:24 +0100] "GET / HTTP/1.1" 301 162 "-" "curl/7.29.0" 162.159.110.2 - - [06/Jan/2026:18:51:51 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.159.110.61 - - [06/Jan/2026:18:51:52 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 162.159.110.61 - - [06/Jan/2026:18:51:53 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 162.159.110.2 - - [06/Jan/2026:18:51:53 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 162.159.110.2 - - [06/Jan/2026:18:51:53 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 162.159.110.2 - - [06/Jan/2026:18:51:54 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 162.159.110.2 - - [06/Jan/2026:18:51:54 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.159.110.2 - - [06/Jan/2026:18:51:55 +0100] "GET /ADMIN.php HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [06/Jan/2026:18:55:31 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:33 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:33 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:34 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:34 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:35 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:35 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:36 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:36 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [06/Jan/2026:18:55:37 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:38 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:38 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:39 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:39 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:40 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:40 +0100] "GET /txets.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:41 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:42 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:42 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:43 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:43 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:44 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:44 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:45 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:45 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:46 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:47 +0100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:47 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:48 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [06/Jan/2026:18:55:48 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:49 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:49 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:50 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:50 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:51 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:51 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:52 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:53 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:53 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:54 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [06/Jan/2026:18:55:54 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:55 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:55 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [06/Jan/2026:18:55:56 +0100] "GET /wp-includes/js/dist HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:56 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:57 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:58 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:58 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:59 +0100] "GET /.well-known/x.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:55:59 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [06/Jan/2026:18:56:00 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.117 - - [06/Jan/2026:19:02:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.63.117 - - [06/Jan/2026:19:02:04 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 172.69.63.117 - - [06/Jan/2026:19:02:04 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 172.69.63.117 - - [06/Jan/2026:19:02:05 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 172.69.63.117 - - [06/Jan/2026:19:02:05 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 172.69.63.117 - - [06/Jan/2026:19:02:05 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 172.69.63.117 - - [06/Jan/2026:19:02:06 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.69.63.117 - - [06/Jan/2026:19:02:06 +0100] "GET /ADMIN.php HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [06/Jan/2026:19:37:58 +0100] "GET /.env HTTP/1.1" 301 162 "-" "-" 104.23.223.27 - - [06/Jan/2026:19:37:59 +0100] "GET /.env.local HTTP/1.1" 301 162 "-" "-" 104.23.223.27 - - [06/Jan/2026:19:38:00 +0100] "GET /.env.production HTTP/1.1" 301 162 "-" "-" 104.23.223.27 - - [06/Jan/2026:19:38:01 +0100] "GET /.env.staging HTTP/1.1" 301 162 "-" "-" 104.23.223.27 - - [06/Jan/2026:19:38:01 +0100] "GET /.env.dev HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [06/Jan/2026:19:38:03 +0100] "GET /.env.bak HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [06/Jan/2026:19:38:03 +0100] "GET /.env.backup HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [06/Jan/2026:19:38:03 +0100] "GET /.env.old HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [06/Jan/2026:19:38:04 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [06/Jan/2026:19:38:05 +0100] "GET /.env.sample HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [06/Jan/2026:19:38:05 +0100] "GET /.env.test HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:13 +0100] "GET /.env.template HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:20 +0100] "GET /.env.copy HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:20 +0100] "GET /storage/logs/laravel.log HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:21 +0100] "GET /api/config HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:21 +0100] "GET /api/env HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:22 +0100] "GET /config/.env HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:22 +0100] "GET /.aws/credentials HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:23 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:24 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:24 +0100] "GET /public/.env HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:24 +0100] "GET /storage/.env HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:31 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:32 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "-" 104.23.217.46 - - [06/Jan/2026:19:38:39 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "-" 104.23.221.13 - - [06/Jan/2026:19:38:46 +0100] "GET /.env_1 HTTP/1.1" 301 162 "-" "-" 104.23.221.13 - - [06/Jan/2026:19:38:53 +0100] "GET /.env.debug HTTP/1.1" 301 162 "-" "-" 104.23.221.13 - - [06/Jan/2026:19:38:54 +0100] "GET /.env.production.local HTTP/1.1" 301 162 "-" "-" 104.23.221.13 - - [06/Jan/2026:19:38:54 +0100] "GET /config.env HTTP/1.1" 301 162 "-" "-" 104.23.223.110 - - [06/Jan/2026:19:38:55 +0100] "GET /_profiler/phpinfo HTTP/1.1" 301 162 "-" "-" 104.23.223.110 - - [06/Jan/2026:19:38:55 +0100] "GET /info HTTP/1.1" 301 162 "-" "-" 104.23.223.110 - - [06/Jan/2026:19:38:56 +0100] "GET /phpinfo HTTP/1.1" 301 162 "-" "-" 104.23.223.110 - - [06/Jan/2026:19:38:56 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 104.23.223.110 - - [06/Jan/2026:19:38:57 +0100] "GET /phpmyinfo HTTP/1.1" 301 162 "-" "-" 172.71.82.45 - - [06/Jan/2026:20:36:57 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.104 - - [06/Jan/2026:20:36:58 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.69.17.19 - - [06/Jan/2026:21:35:21 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.69.17.156 - - [06/Jan/2026:21:35:22 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.69.17.156 - - [06/Jan/2026:21:35:22 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.69.17.156 - - [06/Jan/2026:21:35:22 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.69.17.156 - - [06/Jan/2026:21:35:22 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.69.17.156 - - [06/Jan/2026:21:35:23 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.69.17.156 - - [06/Jan/2026:21:35:23 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.71.184.207 - - [06/Jan/2026:22:42:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.251.195 - - [06/Jan/2026:23:13:35 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 104.23.251.231 - - [06/Jan/2026:23:13:35 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 104.23.251.231 - - [06/Jan/2026:23:13:35 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 104.23.251.231 - - [06/Jan/2026:23:13:35 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 104.23.251.231 - - [06/Jan/2026:23:13:35 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 104.23.251.231 - - [06/Jan/2026:23:13:35 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 104.23.251.231 - - [06/Jan/2026:23:13:35 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.71.82.44 - - [06/Jan/2026:23:47:24 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:25 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:25 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:26 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:26 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:27 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:27 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:27 +0100] "GET /admin/upload/mini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:28 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:28 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:29 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:29 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:29 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:30 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:30 +0100] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:31 +0100] "GET /alfav4.1-tesla.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:31 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:31 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:32 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:32 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:33 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:33 +0100] "GET /css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:33 +0100] "GET /cyber.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:34 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.82.44 - - [06/Jan/2026:23:47:34 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:35 +0100] "GET /image/c.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:35 +0100] "GET /images/alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:36 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:36 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:36 +0100] "GET /images/xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:37 +0100] "GET /index2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:37 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:38 +0100] "GET /luuf.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:38 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.82.44 - - [06/Jan/2026:23:47:39 +0100] "GET /mm.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:39 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:39 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:40 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:40 +0100] "GET /tmp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:41 +0100] "GET /up.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:41 +0100] "GET /uploaded_script.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:41 +0100] "GET /vendor/composer/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:42 +0100] "GET /vendor/composer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:42 +0100] "GET /wp-admin/a.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:43 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:43 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:43 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:44 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:44 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:45 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:45 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.82.44 - - [06/Jan/2026:23:47:46 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.82.44 - - [06/Jan/2026:23:47:46 +0100] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.81.217 - - [07/Jan/2026:01:30:11 +0100] "GET /license.txt HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 172.68.10.41 - - [07/Jan/2026:03:04:13 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.64.200.99 - - [07/Jan/2026:03:05:55 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.68.10.40 - - [07/Jan/2026:03:07:15 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.134.112 - - [07/Jan/2026:04:18:45 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 141.101.97.64 - - [07/Jan/2026:04:18:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 162.158.167.183 - - [07/Jan/2026:04:25:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.159.98.96 - - [07/Jan/2026:04:44:01 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:02 +0100] "GET /worksec.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:03 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:03 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:04 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:04 +0100] "GET /an8.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:05 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:05 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:06 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:06 +0100] "GET /byp8.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:07 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:07 +0100] "GET /xrp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:07 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:08 +0100] "GET /ws28.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:08 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:09 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:09 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:10 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:10 +0100] "GET /dox.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:10 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:11 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:11 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:12 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:12 +0100] "GET /f8.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:13 +0100] "GET /moon3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:13 +0100] "GET /ffile.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:14 +0100] "GET /X7x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:14 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:15 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:15 +0100] "GET /gec.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:16 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:16 +0100] "GET /file30.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:16 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:17 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:17 +0100] "GET /xml.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:18 +0100] "GET /bless14.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:18 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:18 +0100] "GET /oo.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:19 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:19 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:20 +0100] "GET /jga.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:20 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:21 +0100] "GET /wp-admin/new2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:21 +0100] "GET /ws29.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:22 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:22 +0100] "GET /pass.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:22 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:23 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:23 +0100] "GET /sitemaps.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:24 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:24 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:24 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:25 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:26 +0100] "GET /img.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:26 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:27 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:27 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:27 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:28 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:28 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:29 +0100] "GET /wp-sign.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:29 +0100] "GET /ppp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:29 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:30 +0100] "GET /Ov-Simple1.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:30 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:31 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:31 +0100] "GET /wp-help.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:32 +0100] "GET /xc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:32 +0100] "GET /wp-admin/includes/wp-trackback.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:32 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:33 +0100] "GET /hly.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:33 +0100] "GET /text.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:34 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:34 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:35 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:35 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:36 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:36 +0100] "GET /yes.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:36 +0100] "GET /09fa6.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:37 +0100] "GET /89.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:37 +0100] "GET /has.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:37 +0100] "GET /nax.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:38 +0100] "GET /ooj.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:38 +0100] "GET /orm.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:39 +0100] "GET /yep.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:39 +0100] "GET /x3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:39 +0100] "GET /6erg.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:40 +0100] "GET /ggfi.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:40 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:41 +0100] "GET /jju.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:41 +0100] "GET /rsnu.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:41 +0100] "GET /lc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:42 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:43 +0100] "GET /gold.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:43 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:43 +0100] "GET /aua.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:44 +0100] "GET /great.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:44 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:45 +0100] "GET /ot.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:45 +0100] "GET /witmm.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:46 +0100] "GET /ocxla.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:46 +0100] "GET /tt.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:46 +0100] "GET /resp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:47 +0100] "GET /100.kb.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:47 +0100] "GET /wqqs.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:47 +0100] "GET /zwq13.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:48 +0100] "GET /rtx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:48 +0100] "GET /1index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:49 +0100] "GET /fs6.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:49 +0100] "GET /clasa99.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:50 +0100] "GET /fasx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:50 +0100] "GET /c4.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:51 +0100] "GET /lock1.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:51 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:51 +0100] "GET /wp-includes/js/codemirror/info.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:52 +0100] "GET /en/gastenboek.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:52 +0100] "GET /third_party/kcfinder/upload.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:53 +0100] "GET /lock11.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:53 +0100] "GET /api137.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:54 +0100] "GET /class629.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:54 +0100] "GET /wp670.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:54 +0100] "GET /v1.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:55 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:55 +0100] "GET /wp-admin/userk.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:56 +0100] "GET /skinmain.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:56 +0100] "GET /.well-known/new.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:57 +0100] "GET /orxnwdbb.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:57 +0100] "GET /v3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:57 +0100] "GET /fs8.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:58 +0100] "GET /wp-admin/includes/links.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:58 +0100] "GET /backup/dumper.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:58 +0100] "GET /adminer-4.5.0-mysql.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:59 +0100] "GET /site/wp-class.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:44:59 +0100] "GET /video.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:00 +0100] "GET /scgi-bin.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:00 +0100] "GET /finest09.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:01 +0100] "GET /1100.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:01 +0100] "GET /iov.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:02 +0100] "GET /app/config.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:02 +0100] "GET /.well-known/ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:03 +0100] "GET /.well-known.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:03 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:04 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:04 +0100] "GET /2024.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:05 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:05 +0100] "GET /Diff.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:05 +0100] "GET /Engine.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:06 +0100] "GET /ID3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:06 +0100] "GET /IXR.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:06 +0100] "GET /SimplePie.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:07 +0100] "GET /Text.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:07 +0100] "GET /aahana.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [07/Jan/2026:04:45:08 +0100] "GET /ws35.php HTTP/1.1" 301 162 "-" "-" 104.23.209.47 - - [07/Jan/2026:05:28:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 162.158.107.3 - - [07/Jan/2026:08:57:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.111 - - [07/Jan/2026:08:57:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.175.111 - - [07/Jan/2026:08:57:48 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 104.23.175.111 - - [07/Jan/2026:08:57:48 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.111 - - [07/Jan/2026:08:57:49 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.111 - - [07/Jan/2026:08:57:49 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.111 - - [07/Jan/2026:08:57:49 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.111 - - [07/Jan/2026:08:57:50 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.111 - - [07/Jan/2026:08:57:50 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 104.23.175.111 - - [07/Jan/2026:08:57:51 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.111 - - [07/Jan/2026:08:57:51 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 104.23.223.110 - - [07/Jan/2026:09:35:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 104.23.221.12 - - [07/Jan/2026:10:12:48 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.144.21 - - [07/Jan/2026:10:14:06 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 162.158.154.138 - - [07/Jan/2026:12:04:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.88.110 - - [07/Jan/2026:12:31:09 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.49 - - [07/Jan/2026:12:31:11 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.167.183 - - [07/Jan/2026:13:12:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.159.116 - - [07/Jan/2026:13:12:57 +0100] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.22.17.65 - - [07/Jan/2026:13:12:57 +0100] "GET /media/system/js/core.js HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.22.1.198 - - [07/Jan/2026:13:28:57 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.195.108 - - [07/Jan/2026:13:52:37 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.147.173 - - [07/Jan/2026:17:15:01 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.69.33.201 - - [07/Jan/2026:17:16:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 172.70.215.84 - - [07/Jan/2026:17:16:40 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 162.158.187.22 - - [07/Jan/2026:17:16:59 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 172.70.207.143 - - [07/Jan/2026:17:17:04 +0100] "GET /sitemap.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 172.64.217.20 - - [07/Jan/2026:17:17:29 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 172.71.103.106 - - [07/Jan/2026:18:09:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 104.23.223.111 - - [07/Jan/2026:19:19:44 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.223.110 - - [07/Jan/2026:19:23:30 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.2.87 - - [07/Jan/2026:19:25:10 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.68.2.87 - - [07/Jan/2026:19:25:10 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.68.2.87 - - [07/Jan/2026:19:25:10 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.68.2.87 - - [07/Jan/2026:19:25:10 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.68.2.87 - - [07/Jan/2026:19:25:10 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.2.87 - - [07/Jan/2026:19:25:10 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.68.2.87 - - [07/Jan/2026:19:25:11 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.71.194.122 - - [07/Jan/2026:20:11:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.176.91 - - [07/Jan/2026:20:48:53 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:54 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:55 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:55 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:56 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:56 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:57 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:57 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:58 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:58 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:59 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:48:59 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:00 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:00 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:01 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:01 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:02 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:02 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:03 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:03 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:04 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:04 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:04 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:05 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:05 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:06 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:06 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:07 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:08 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:08 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:08 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:09 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:10 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:11 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:12 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:12 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:13 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:13 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:14 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:14 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:15 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:16 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:16 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:17 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:17 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:18 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:18 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:19 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:19 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:20 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:20 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:21 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:22 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:22 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:22 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:23 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:23 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:24 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:25 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:25 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:26 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:26 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:27 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:27 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:28 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:28 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:29 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:30 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:30 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:30 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:31 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:32 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:32 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:33 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:33 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:34 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:34 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:34 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:35 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:35 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:36 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:36 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:37 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:37 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:38 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:38 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:39 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:39 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:40 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:40 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:41 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:41 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:42 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:42 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:43 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:43 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:44 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:44 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:45 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:45 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:45 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:46 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:46 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:47 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:47 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:48 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:48 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:49 +0100] "GET /juuuu.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:49 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:50 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:50 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:51 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:51 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:52 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:53 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:53 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:54 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:54 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:54 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:55 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:55 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:56 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:56 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:57 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:58 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:58 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:59 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:49:59 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:00 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:00 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:01 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:01 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:02 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:03 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:03 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:03 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:04 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:04 +0100] "GET /ac.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:05 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:05 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:06 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:06 +0100] "GET /xaz.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:07 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:07 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:08 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:09 +0100] "GET /wtz.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:11 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:12 +0100] "GET /xb.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:12 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:12 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.69.176.91 - - [07/Jan/2026:20:50:13 +0100] "GET /rh.php HTTP/1.1" 301 162 "-" "-" 108.162.249.114 - - [07/Jan/2026:21:14:39 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:40 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:41 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [07/Jan/2026:21:14:41 +0100] "GET /.well-known/error.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:42 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:42 +0100] "GET //wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:43 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:43 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:44 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:44 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:45 +0100] "GET /admin/controller/extension/extension/vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:45 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:46 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:46 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:46 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:47 +0100] "GET /assets/vx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:47 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:48 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:48 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:49 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:49 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:49 +0100] "GET /function/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:50 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [07/Jan/2026:21:14:50 +0100] "GET /images/install.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:50 +0100] "GET /index.php/feed/atom/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:51 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:51 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:51 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:52 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [07/Jan/2026:21:14:52 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:53 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:54 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:54 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:55 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:55 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:56 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:14:57 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.114 - - [07/Jan/2026:21:14:57 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:58 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:58 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:14:59 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:15:00 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:15:00 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:15:00 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:15:01 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:15:01 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:15:03 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:15:03 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:15:03 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.114 - - [07/Jan/2026:21:15:04 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:15:04 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.114 - - [07/Jan/2026:21:15:04 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.109.54 - - [07/Jan/2026:21:30:33 +0100] "GET /txets.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.23.221.13 - - [07/Jan/2026:22:39:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 141.101.69.71 - - [08/Jan/2026:01:23:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.172.11 - - [08/Jan/2026:01:42:37 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.22.17.246 - - [08/Jan/2026:04:10:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.159.116 - - [08/Jan/2026:04:10:30 +0100] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.22.17.65 - - [08/Jan/2026:04:10:30 +0100] "GET /media/system/js/core.js HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.179.156 - - [08/Jan/2026:04:51:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.70.126.45 - - [08/Jan/2026:04:52:43 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.175.32 - - [08/Jan/2026:08:01:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 13; SM-A037U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Mobile Safari/537.36" 104.23.160.65 - - [08/Jan/2026:08:01:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 13; SM-A037U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Mobile Safari/537.36" 104.23.160.65 - - [08/Jan/2026:08:01:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 13; SM-A037U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Mobile Safari/537.36" 162.158.42.75 - - [08/Jan/2026:09:52:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.41.23 - - [08/Jan/2026:09:55:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.150.42 - - [08/Jan/2026:10:03:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36" 162.158.63.224 - - [08/Jan/2026:11:43:21 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 162.158.63.76 - - [08/Jan/2026:11:43:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 172.70.126.45 - - [08/Jan/2026:13:16:26 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.216.21 - - [08/Jan/2026:13:35:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.70.163.125 - - [08/Jan/2026:13:35:46 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 141.101.86.105 - - [08/Jan/2026:13:53:11 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:14 +0100] "GET /motu.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:14 +0100] "GET /xsas.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:15 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:15 +0100] "GET /xwpg.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:15 +0100] "GET /baee.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:16 +0100] "GET /iov.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:16 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:16 +0100] "GET /mga.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:16 +0100] "GET /rendi59.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:17 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:17 +0100] "GET /assacc.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:18 +0100] "GET /6y7t.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:18 +0100] "GET /monso.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:18 +0100] "GET /bnnof6.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [08/Jan/2026:13:53:18 +0100] "GET /str.php HTTP/1.1" 301 162 "-" "-" 104.22.1.199 - - [08/Jan/2026:15:40:26 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.24.96 - - [08/Jan/2026:15:40:26 +0100] "GET /details.php?post_id=8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.42.163 - - [08/Jan/2026:16:06:11 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.70.42.163 - - [08/Jan/2026:16:06:11 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.70.42.163 - - [08/Jan/2026:16:06:11 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.70.42.163 - - [08/Jan/2026:16:06:11 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 162.158.152.182 - - [08/Jan/2026:16:06:12 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 162.158.152.182 - - [08/Jan/2026:16:06:12 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 162.158.152.182 - - [08/Jan/2026:16:06:12 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 172.70.250.219 - - [08/Jan/2026:16:18:45 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.246.101 - - [08/Jan/2026:16:20:48 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.22.24.97 - - [08/Jan/2026:16:30:26 +0100] "GET /details.php?post_id=7&v=Favorite HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.24.142 - - [08/Jan/2026:16:46:59 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.182.193 - - [08/Jan/2026:17:14:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g" 104.23.245.207 - - [08/Jan/2026:17:20:26 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.238.86 - - [08/Jan/2026:17:58:12 +0100] "GET /details.php?post_id=2&v=Favorite HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.175.110 - - [08/Jan/2026:18:51:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.71.124.49 - - [08/Jan/2026:18:51:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.124.49 - - [08/Jan/2026:18:51:11 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.71.124.49 - - [08/Jan/2026:18:51:12 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.71.124.49 - - [08/Jan/2026:18:51:13 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 172.71.124.49 - - [08/Jan/2026:18:51:14 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.71.124.49 - - [08/Jan/2026:18:51:15 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.71.124.49 - - [08/Jan/2026:18:51:16 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.71.124.49 - - [08/Jan/2026:18:51:16 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.162.96 - - [08/Jan/2026:18:51:17 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 108.162.226.190 - - [08/Jan/2026:18:51:18 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.68.2.86 - - [08/Jan/2026:19:51:01 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.68.2.86 - - [08/Jan/2026:19:51:01 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.68.2.86 - - [08/Jan/2026:19:51:01 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.68.2.86 - - [08/Jan/2026:19:51:01 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.2.86 - - [08/Jan/2026:19:51:01 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.2.86 - - [08/Jan/2026:19:51:02 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.68.2.86 - - [08/Jan/2026:19:51:02 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.70.92.157 - - [08/Jan/2026:21:29:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.70.92.157 - - [08/Jan/2026:21:29:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.88.111 - - [08/Jan/2026:21:29:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.88.88 - - [08/Jan/2026:21:29:31 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.88.111 - - [08/Jan/2026:21:29:36 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 162.158.88.111 - - [08/Jan/2026:21:29:38 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.88.111 - - [08/Jan/2026:21:29:41 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.88.111 - - [08/Jan/2026:21:29:43 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.88.111 - - [08/Jan/2026:21:29:45 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.88.111 - - [08/Jan/2026:21:29:47 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.88.111 - - [08/Jan/2026:21:29:47 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.88.111 - - [08/Jan/2026:21:29:48 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 172.68.22.142 - - [08/Jan/2026:22:26:14 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.69.50.159 - - [08/Jan/2026:22:27:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.41.22 - - [08/Jan/2026:22:29:44 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.23.245.206 - - [08/Jan/2026:23:51:34 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.238.86 - - [09/Jan/2026:01:07:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.239.84 - - [09/Jan/2026:01:59:34 +0100] "GET /userfuns.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.23.239.85 - - [09/Jan/2026:02:52:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Brave/1.25.73" 162.158.122.52 - - [09/Jan/2026:02:52:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 9; MI 9 Build/PKQ1.181121.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/73.0.3683.90 Mobile Safari/537.36 LieBaoFast/5.10.1" 104.23.175.111 - - [09/Jan/2026:02:54:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 9; MI 9 Build/PKQ1.181121.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/73.0.3683.90 Mobile Safari/537.36 LieBaoFast/5.10.1" 172.69.166.98 - - [09/Jan/2026:02:55:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 9; MI 9 Build/PKQ1.181121.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/73.0.3683.90 Mobile Safari/537.36 LieBaoFast/5.10.1" 162.158.162.97 - - [09/Jan/2026:02:58:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 9; MI 9 Build/PKQ1.181121.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/73.0.3683.90 Mobile Safari/537.36 LieBaoFast/5.10.1" 162.158.164.147 - - [09/Jan/2026:02:59:33 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 9; MI 9 Build/PKQ1.181121.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/73.0.3683.90 Mobile Safari/537.36 LieBaoFast/5.10.1" 172.71.184.207 - - [09/Jan/2026:03:23:12 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.10.41 - - [09/Jan/2026:03:23:56 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.175.157 - - [09/Jan/2026:04:06:24 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.70.214.78 - - [09/Jan/2026:04:51:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.127 Safari/534.16" 172.71.134.112 - - [09/Jan/2026:05:49:52 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.68.151.69 - - [09/Jan/2026:05:49:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.168.92 - - [09/Jan/2026:10:00:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 162.158.182.192 - - [09/Jan/2026:13:29:45 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.223.110 - - [09/Jan/2026:13:30:11 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.22.1.180 - - [09/Jan/2026:14:24:33 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.70.233.55 - - [09/Jan/2026:14:27:03 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:04 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:04 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:04 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:05 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:05 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:05 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:05 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:06 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:06 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:06 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:07 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:07 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:07 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:07 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:08 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:08 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:08 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:09 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:09 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:09 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:09 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:10 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:10 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:10 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:11 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:11 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:11 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:11 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:12 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:12 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:12 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:13 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:13 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:13 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:14 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:14 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:14 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:15 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:15 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:15 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:16 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:16 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:16 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:16 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:17 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:17 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:17 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:18 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:18 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:18 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:18 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:19 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:19 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:19 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:19 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:20 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:20 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:20 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:21 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:21 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:21 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:21 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:22 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:22 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:22 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:23 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:23 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:23 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:23 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:24 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:24 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:24 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:24 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:25 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:25 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:25 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:26 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:26 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:26 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:26 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:27 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:27 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:27 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:27 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:28 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:28 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:28 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:29 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:29 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:29 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:29 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:30 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:30 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:30 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:30 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:31 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:31 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:31 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:32 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:32 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:32 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:32 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:33 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:33 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:33 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:34 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:34 +0100] "GET /juuuu.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:34 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:34 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:35 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:35 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:35 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:36 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:36 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:36 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:36 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:37 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:37 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:37 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:38 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:38 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:38 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:38 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:39 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:39 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:39 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:39 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:40 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:40 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:40 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:41 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:41 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:41 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:41 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:42 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:42 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:42 +0100] "GET /ac.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:43 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:43 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:43 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:44 +0100] "GET /xaz.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:44 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:44 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:44 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:45 +0100] "GET /wtz.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:45 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:45 +0100] "GET /xb.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:46 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:46 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [09/Jan/2026:14:27:46 +0100] "GET /rh.php HTTP/1.1" 301 162 "-" "-" 108.162.216.174 - - [09/Jan/2026:14:34:15 +0100] "GET / HTTP/1.1" 301 162 "-" "cypex.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 162.158.94.22 - - [09/Jan/2026:15:01:38 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.69.151.199 - - [09/Jan/2026:15:44:10 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Apache-HttpClient/4.5.14 (Java/11.0.11)" 172.69.94.119 - - [09/Jan/2026:16:22:28 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 162.159.120.250 - - [09/Jan/2026:16:41:26 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 108.162.246.118 - - [09/Jan/2026:16:41:26 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.186.250 - - [09/Jan/2026:17:06:18 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.7.183 - - [09/Jan/2026:17:54:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.71.198.173 - - [09/Jan/2026:19:43:53 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:43:56 +0100] "GET /wp-includes/assets/ty.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:43:57 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:43:58 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:00 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:00 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.173 - - [09/Jan/2026:19:44:01 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.173 - - [09/Jan/2026:19:44:02 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:03 +0100] "GET /upload.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:04 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:05 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:06 +0100] "GET /tinyy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:07 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:08 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:08 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:09 +0100] "GET /bala.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:10 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:11 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:12 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:12 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:13 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:14 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:15 +0100] "GET /text.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:16 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:16 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:17 +0100] "GET /files.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:18 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:18 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:19 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:20 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:20 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:21 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:22 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:22 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:24 +0100] "GET /lock360.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:25 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:26 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:27 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:28 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:29 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:30 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:31 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:32 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:32 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.173 - - [09/Jan/2026:19:44:33 +0100] "GET /server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:34 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:34 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:35 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:35 +0100] "GET /options.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:36 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:36 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:37 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:38 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [09/Jan/2026:19:44:38 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:39 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:39 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:40 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:41 +0100] "GET /gmo.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:41 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:42 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [09/Jan/2026:19:44:42 +0100] "GET /wp-error.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.191.73 - - [09/Jan/2026:20:26:25 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.71.191.73 - - [09/Jan/2026:20:26:25 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.71.190.9 - - [09/Jan/2026:20:26:26 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.71.190.9 - - [09/Jan/2026:20:26:27 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.71.190.9 - - [09/Jan/2026:20:26:27 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.71.190.9 - - [09/Jan/2026:20:26:29 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.71.190.9 - - [09/Jan/2026:20:26:30 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.64.217.52 - - [09/Jan/2026:20:28:47 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.64.217.52 - - [09/Jan/2026:20:28:48 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.64.217.52 - - [09/Jan/2026:20:28:49 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.64.217.52 - - [09/Jan/2026:20:28:49 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.64.217.52 - - [09/Jan/2026:20:28:49 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.64.217.52 - - [09/Jan/2026:20:28:50 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.64.217.52 - - [09/Jan/2026:20:28:50 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.71.134.112 - - [09/Jan/2026:21:34:09 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 141.101.96.60 - - [09/Jan/2026:21:34:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.211.120 - - [09/Jan/2026:21:36:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.184.206 - - [09/Jan/2026:22:26:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.255.96 - - [09/Jan/2026:22:27:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36" 104.23.221.12 - - [10/Jan/2026:00:31:16 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 162.158.182.192 - - [10/Jan/2026:00:31:52 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:04 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.123 - - [10/Jan/2026:02:19:06 +0100] "GET /wp-includes/assets/ty.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.123 - - [10/Jan/2026:02:19:06 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.226.123 - - [10/Jan/2026:02:19:07 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.123 - - [10/Jan/2026:02:19:07 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.226.123 - - [10/Jan/2026:02:19:08 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.226.123 - - [10/Jan/2026:02:19:08 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.226.123 - - [10/Jan/2026:02:19:09 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:09 +0100] "GET /upload.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:10 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:10 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:10 +0100] "GET /tinyy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:11 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:11 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:11 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:12 +0100] "GET /bala.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:12 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:13 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:13 +0100] "GET /man.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:14 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:14 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:14 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:15 +0100] "GET /text.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:15 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:16 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:16 +0100] "GET /files.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:16 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:17 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:17 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:18 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:18 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:18 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:19 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:19 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:20 +0100] "GET /lock360.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:20 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:21 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:21 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:21 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:22 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:22 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:23 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:23 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:24 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:24 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:24 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:25 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:25 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:26 +0100] "GET /options.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:26 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:26 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:27 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:27 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:28 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:28 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:29 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:29 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:29 +0100] "GET /gmo.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [10/Jan/2026:02:19:30 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:30 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.226.190 - - [10/Jan/2026:02:19:31 +0100] "GET /wp-error.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.104 - - [10/Jan/2026:03:41:29 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:30 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:30 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:31 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:32 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:32 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:33 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:33 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:34 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:34 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:35 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:35 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.104 - - [10/Jan/2026:03:41:36 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:37 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:37 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.104 - - [10/Jan/2026:03:41:38 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:38 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:39 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:39 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:40 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:40 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:41 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:42 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.104 - - [10/Jan/2026:03:41:42 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:43 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:43 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:44 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:44 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:45 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:46 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.104 - - [10/Jan/2026:03:41:46 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:47 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:47 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:48 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:48 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:49 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:49 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:50 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:51 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:51 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:52 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:52 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:53 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:53 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:54 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:55 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:55 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:56 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:56 +0100] "GET /link.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:57 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.104 - - [10/Jan/2026:03:41:57 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:41:58 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.104 - - [10/Jan/2026:03:41:59 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:41:59 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:42:00 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:42:00 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:42:01 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:42:01 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:42:02 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:42:03 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:42:03 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:42:04 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:42:04 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:42:05 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:42:05 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:42:06 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:42:06 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.219.104 - - [10/Jan/2026:03:42:07 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:42:08 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:42:08 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.219.104 - - [10/Jan/2026:03:42:09 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.219.104 - - [10/Jan/2026:03:42:09 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.126.44 - - [10/Jan/2026:04:48:09 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.182.192 - - [10/Jan/2026:05:11:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 141.101.84.236 - - [10/Jan/2026:09:12:43 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.138 - - [10/Jan/2026:09:12:43 +0100] "GET /wp-includes/assets/ty.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:44 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:44 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:45 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:45 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:45 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:46 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:46 +0100] "GET /upload.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [10/Jan/2026:09:12:46 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:47 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:47 +0100] "GET /tinyy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:47 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:48 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:48 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:48 +0100] "GET /bala.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:49 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:49 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:49 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:50 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:50 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:50 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:51 +0100] "GET /text.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:51 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [10/Jan/2026:09:12:51 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:52 +0100] "GET /files.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:52 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:52 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:53 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:53 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:53 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:54 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [10/Jan/2026:09:12:54 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:54 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:55 +0100] "GET /lock360.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:55 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:55 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:56 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:56 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:57 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:57 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:57 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:58 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:58 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:58 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:12:59 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:12:59 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [10/Jan/2026:09:12:59 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:13:00 +0100] "GET /options.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:13:00 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:13:00 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:13:01 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:13:01 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:13:01 +0100] "GET /default.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:13:02 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:13:02 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:13:02 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:13:02 +0100] "GET /gmo.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:09:13:03 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:13:03 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:09:13:03 +0100] "GET /wp-error.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 104.23.221.13 - - [10/Jan/2026:09:58:21 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 162.158.111.89 - - [10/Jan/2026:09:59:39 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.22.17.247 - - [10/Jan/2026:12:40:38 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.102.254 - - [10/Jan/2026:13:57:23 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.85.66 - - [10/Jan/2026:15:01:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.163.124 - - [10/Jan/2026:15:01:58 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:29:44 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:29:46 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:29:47 +0100] "GET /2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:29:48 +0100] "GET /12.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:29:50 +0100] "GET /13.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:29:51 +0100] "GET /403.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.162.96 - - [10/Jan/2026:15:29:52 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:29:53 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:29:54 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:29:54 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:29:55 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:29:55 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:29:56 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:29:56 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:29:57 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:29:58 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:29:58 +0100] "GET /alf.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:00 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:00 +0100] "GET /alfashell.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:01 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:01 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:02 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:02 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:03 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:03 +0100] "GET /c.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:04 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:04 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:05 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:05 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:06 +0100] "GET /content.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:07 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:08 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:09 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:09 +0100] "GET /favicon.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:11 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:11 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:12 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:13 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:13 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:14 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:14 +0100] "GET /gg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:15 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:15 +0100] "GET /help.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:16 +0100] "GET /i.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:16 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:17 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:17 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:18 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:19 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:19 +0100] "GET /man.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:20 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:21 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:22 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:23 +0100] "GET /root.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:25 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:25 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:27 +0100] "GET /termps.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:28 +0100] "GET /test.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:30 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:33 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:34 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:36 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:41 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:43 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:44 +0100] "GET /wp-include.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:45 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:46 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:47 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:47 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:48 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.162.96 - - [10/Jan/2026:15:30:49 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [10/Jan/2026:15:30:49 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:06 +0100] "GET /wp-admin/z.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:06 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:07 +0100] "GET /o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:07 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:07 +0100] "GET /phpmailer.lang-sv.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:08 +0100] "GET /wp-admin/a.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:08 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:08 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:09 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:09 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:09 +0100] "GET /wp-content/plugins/akismet/akismet.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:10 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:10 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:10 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:11 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:11 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:11 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:11 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:12 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:12 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:12 +0100] "GET /public/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:13 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:13 +0100] "GET /schallfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:13 +0100] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:14 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:14 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:14 +0100] "GET /vendor/composer/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:15 +0100] "GET /w.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:15 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:15 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:16 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:16 +0100] "GET /wp-admin/css/colors/light/schallfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:16 +0100] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:17 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:17 +0100] "GET /wp-admin/images/moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:17 +0100] "GET /wp-admin/includes/schallfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:18 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:18 +0100] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:18 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:19 +0100] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:19 +0100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:19 +0100] "GET /wp-admin/s.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:20 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [10/Jan/2026:15:32:20 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:20 +0100] "GET /wp-content/403.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [10/Jan/2026:15:32:21 +0100] "GET /wp-content/a.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:21 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [10/Jan/2026:15:32:21 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:22:20 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:22:31 +0100] "GET /fonts/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:22:33 +0100] "GET /test/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.124.48 - - [10/Jan/2026:17:22:35 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.124.48 - - [10/Jan/2026:17:22:36 +0100] "GET /css/smoothness/images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:22:37 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:22:41 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:22:43 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:22:45 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:22:48 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:22:49 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:22:52 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:22:53 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:22:55 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:22:59 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:00 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.124.48 - - [10/Jan/2026:17:23:02 +0100] "GET /wp-includes/blocks/list-item/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:07 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:09 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:23:17 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.124.48 - - [10/Jan/2026:17:23:18 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:19 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:22 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:24 +0100] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:26 +0100] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:27 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:28 +0100] "GET /wp-includes/blocks/buttons/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:31 +0100] "GET /wp-includes/blocks/details/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:33 +0100] "GET /wp-includes/blocks/file/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:23:35 +0100] "GET /wp-includes/blocks/freeform/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:37 +0100] "GET /wp-includes/blocks/missing/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:39 +0100] "GET /wp-includes/blocks/post-comments-form/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:23:40 +0100] "GET /wp-includes/blocks/post-terms/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:23:45 +0100] "GET /wp-includes/blocks/read-more/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:24:03 +0100] "GET /wp-includes/blocks/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:24:05 +0100] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:24:06 +0100] "GET /wp-includes/blocks/social-link/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:24:07 +0100] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:24:08 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:24:09 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:24:10 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.124.48 - - [10/Jan/2026:17:24:11 +0100] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:24:12 +0100] "GET /wp-includes/js/plupload/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:24:15 +0100] "GET /wp-includes/js/thickbox/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.124.48 - - [10/Jan/2026:17:24:16 +0100] "GET /wp-includes/js/tinymce/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:24:18 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:24:19 +0100] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:24:20 +0100] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:24:21 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.124.48 - - [10/Jan/2026:17:24:23 +0100] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.124.48 - - [10/Jan/2026:17:24:24 +0100] "GET /well-known/acme-challenge/e/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.122.179 - - [10/Jan/2026:17:59:31 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0" 172.70.250.218 - - [10/Jan/2026:19:45:13 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.71.184.207 - - [10/Jan/2026:19:45:28 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.159.98.97 - - [10/Jan/2026:20:33:39 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:40 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:40 +0100] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:41 +0100] "GET /wp-content/plugins/secure-fortress/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.97 - - [10/Jan/2026:20:33:41 +0100] "GET /wp-includes/themes7.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:41 +0100] "GET /contact.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:42 +0100] "GET /load.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:42 +0100] "GET /wp-content/plugins/janusv2/janus.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:43 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.97 - - [10/Jan/2026:20:33:43 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:43 +0100] "GET /wp-Owl.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:44 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:44 +0100] "GET /wp-admin/css/colors HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:44 +0100] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:45 +0100] "GET /wp-content/themes HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.97 - - [10/Jan/2026:20:33:45 +0100] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:45 +0100] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:46 +0100] "GET /wp-admin/maint/users.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:46 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:46 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:47 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:47 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:47 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:48 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:48 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:49 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:49 +0100] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:49 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:50 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:50 +0100] "GET /motu.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:50 +0100] "GET /past.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:51 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:51 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.97 - - [10/Jan/2026:20:33:51 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:52 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:52 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:52 +0100] "GET /wk/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:53 +0100] "GET /woh.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:53 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:53 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:54 +0100] "GET /eagle.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.97 - - [10/Jan/2026:20:33:54 +0100] "GET /files/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:55 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:55 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:55 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:56 +0100] "GET /xc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:56 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:56 +0100] "GET /server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:57 +0100] "GET /wp-includes/assets/ty.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:57 +0100] "GET /wp-includes/PHPMailer HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:57 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.97 - - [10/Jan/2026:20:33:58 +0100] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.98.97 - - [10/Jan/2026:20:33:58 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.223.111 - - [10/Jan/2026:22:26:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.110.131 - - [10/Jan/2026:23:32:50 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:51 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:51 +0100] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:51 +0100] "GET /wp-content/plugins/secure-fortress/avdb_3f7a1921c1e2b.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:52 +0100] "GET /xBrain.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:52 +0100] "GET /wp-includes/themes7.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:52 +0100] "GET /contact.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:53 +0100] "GET /load.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:53 +0100] "GET /wp-content/plugins/janusv2/janus.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:53 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:54 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:54 +0100] "GET /wp-Owl.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:54 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:55 +0100] "GET /wp-admin/css/colors HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:55 +0100] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:55 +0100] "GET /wp-content/themes HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:56 +0100] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:56 +0100] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:56 +0100] "GET /wp-admin/maint/users.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:56 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:57 +0100] "GET /wp-admin/css HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:57 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:57 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:58 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:58 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:58 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:59 +0100] "GET /about/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:32:59 +0100] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:32:59 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:00 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:00 +0100] "GET /motu.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:33:00 +0100] "GET /past.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:01 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:01 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [10/Jan/2026:23:33:01 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:33:02 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.131 - - [10/Jan/2026:23:33:02 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:02 +0100] "GET /wk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:33:03 +0100] "GET /woh.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:03 +0100] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:33:03 +0100] "GET /a.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:33:04 +0100] "GET /eagle.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:04 +0100] "GET /files/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:33:04 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:33:05 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:33:05 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:05 +0100] "GET /xc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.131 - - [10/Jan/2026:23:33:06 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:06 +0100] "GET /server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:06 +0100] "GET /wp-includes/assets/ty.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:07 +0100] "GET /wp-includes/PHPMailer HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:07 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:07 +0100] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.131 - - [10/Jan/2026:23:33:08 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.172.86 - - [11/Jan/2026:00:43:59 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.246.101 - - [11/Jan/2026:00:44:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.151.199 - - [11/Jan/2026:00:47:11 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.151.57 - - [11/Jan/2026:00:47:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:53 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:15:53 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:54 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:54 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:55 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:15:55 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:55 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:56 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:15:56 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:15:56 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:57 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:15:57 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:57 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:58 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:58 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:15:58 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:15:59 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:15:59 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:15:59 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:00 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:00 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:00 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:01 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:01 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:01 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:02 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:02 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:02 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [11/Jan/2026:01:16:03 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:03 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:03 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:04 +0100] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:04 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:04 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:04 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:05 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 141.101.84.236 - - [11/Jan/2026:01:16:05 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:05 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:06 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:06 +0100] "GET /lock360.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:06 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:07 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:07 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:07 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:08 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:08 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:08 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:09 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 141.101.84.236 - - [11/Jan/2026:01:16:09 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:09 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:10 +0100] "GET /upload.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:10 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:10 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 141.101.84.236 - - [11/Jan/2026:01:16:11 +0100] "GET /system.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.94.22 - - [11/Jan/2026:01:37:16 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [11/Jan/2026:01:39:12 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 172.71.164.111 - - [11/Jan/2026:01:43:53 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.184.207 - - [11/Jan/2026:01:44:41 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.70.230.231 - - [11/Jan/2026:02:50:44 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.70.111.161 - - [11/Jan/2026:02:50:45 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.158.166 - - [11/Jan/2026:03:04:01 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.187.227 - - [11/Jan/2026:03:04:10 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:51 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:51 +0100] "GET /fonts/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:52 +0100] "GET /test/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:52 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:52 +0100] "GET /css/smoothness/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:53 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:53 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:53 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.6 - - [11/Jan/2026:03:53:54 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:54 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:54 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:55 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:55 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:56 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:56 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:56 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:57 +0100] "GET /wp-includes/blocks/list-item/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:57 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:57 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:58 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:58 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:58 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:59 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:53:59 +0100] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:53:59 +0100] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:00 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:00 +0100] "GET /wp-includes/blocks/buttons/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:01 +0100] "GET /wp-includes/blocks/details/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:01 +0100] "GET /wp-includes/blocks/file/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:01 +0100] "GET /wp-includes/blocks/freeform/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:54:02 +0100] "GET /wp-includes/blocks/missing/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:02 +0100] "GET /wp-includes/blocks/post-comments-form/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:02 +0100] "GET /wp-includes/blocks/post-terms/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:03 +0100] "GET /wp-includes/blocks/read-more/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:03 +0100] "GET /wp-includes/blocks/search/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:54:03 +0100] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:54:04 +0100] "GET /wp-includes/blocks/social-link/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:54:04 +0100] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:04 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:05 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:05 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:54:05 +0100] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:06 +0100] "GET /wp-includes/js/plupload/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:06 +0100] "GET /wp-includes/js/thickbox/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:54:07 +0100] "GET /wp-includes/js/tinymce/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:54:07 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.193.6 - - [11/Jan/2026:03:54:07 +0100] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:08 +0100] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:08 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.193.6 - - [11/Jan/2026:03:54:08 +0100] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.193.6 - - [11/Jan/2026:03:54:09 +0100] "GET /well-known/acme-challenge/e/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.215.116 - - [11/Jan/2026:04:43:32 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:45 +0100] "GET /files.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.119.36 - - [11/Jan/2026:05:50:46 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.119.36 - - [11/Jan/2026:05:50:46 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.119.36 - - [11/Jan/2026:05:50:46 +0100] "GET /mail.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.119.36 - - [11/Jan/2026:05:50:47 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.119.36 - - [11/Jan/2026:05:50:47 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.119.36 - - [11/Jan/2026:05:50:47 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.119.36 - - [11/Jan/2026:05:50:47 +0100] "GET /system_log.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.119.36 - - [11/Jan/2026:05:50:48 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.119.36 - - [11/Jan/2026:05:50:48 +0100] "GET /.well-known/wso112233.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:48 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:48 +0100] "GET /wp-content/plugins HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:49 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:49 +0100] "GET /wp-includes HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:49 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:49 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:50 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:50 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:50 +0100] "GET /post.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:50 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:51 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:51 +0100] "GET /options.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:51 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:51 +0100] "GET /wordpress/wp-admin/maint HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:52 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:52 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:52 +0100] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:53 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:53 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:53 +0100] "GET /ca5.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:53 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:54 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:54 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:54 +0100] "GET /cgi-bin HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:54 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:55 +0100] "GET /wp-content/dn.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:55 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:55 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:55 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:56 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:56 +0100] "GET /ALFA_DATA/alfacgiapi HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:56 +0100] "GET /hehe.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:56 +0100] "GET /mln.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:57 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:57 +0100] "GET /accah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:57 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:57 +0100] "GET /x.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:58 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:58 +0100] "GET /sf.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.118.138 - - [11/Jan/2026:05:50:58 +0100] "GET /sts.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:58 +0100] "GET /wp-includes/css HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:59 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.118.138 - - [11/Jan/2026:05:50:59 +0100] "GET /xwpg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:59 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.118.138 - - [11/Jan/2026:05:50:59 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.232.81 - - [11/Jan/2026:06:55:59 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.135.15 - - [11/Jan/2026:06:55:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.225.192 - - [11/Jan/2026:07:23:16 +0100] "GET /.env HTTP/1.1" 301 162 "-" "socketburst/0.1" 172.69.178.212 - - [11/Jan/2026:07:33:24 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:26 +0100] "GET /wp-content/shell20211028.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:27 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:27 +0100] "GET /bjfl.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:28 +0100] "GET /byp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:28 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:29 +0100] "GET /upload HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:30 +0100] "GET /user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:30 +0100] "GET /wp-content/mu-plugins-old HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:31 +0100] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:31 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:32 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:32 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:33 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:33 +0100] "GET /index2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:34 +0100] "GET /v.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:35 +0100] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:35 +0100] "GET /wp-includes/IXR HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:36 +0100] "GET /wp-includes/rest-api HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:36 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:37 +0100] "GET /wsa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:37 +0100] "GET /ad.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:38 +0100] "GET /b.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:39 +0100] "GET /fm1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:39 +0100] "GET /lv.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:40 +0100] "GET /private HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:40 +0100] "GET /uploaded_script.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:41 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:41 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.212 - - [11/Jan/2026:07:33:42 +0100] "GET /wp-content/xc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:42 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:43 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:43 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:44 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:45 +0100] "GET /he.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:45 +0100] "GET /leafmailer.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:46 +0100] "GET /users.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:46 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:47 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.212 - - [11/Jan/2026:07:33:47 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:48 +0100] "GET /wp-content/plugins/zgdsfagk/rk3.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:48 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:49 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.212 - - [11/Jan/2026:07:33:50 +0100] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.212 - - [11/Jan/2026:07:33:50 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:51 +0100] "GET /wp-includes/theme-compat HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:51 +0100] "GET /.well-known/acme-challenge HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:52 +0100] "GET /app.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:53 +0100] "GET /link.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:53 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:54 +0100] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:54 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:55 +0100] "GET /wp-includes/block-patterns HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.212 - - [11/Jan/2026:07:33:55 +0100] "GET /wp-includes/blocks/navigation-submenu/wp HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.212 - - [11/Jan/2026:07:33:56 +0100] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.23.43 - - [11/Jan/2026:07:48:39 +0100] "GET / HTTP/1.1" 301 162 "http://www.immojavea.com/blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.22.17.246 - - [11/Jan/2026:08:28:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 162.158.138.239 - - [11/Jan/2026:08:47:01 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:02 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:02 +0100] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:02 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:03 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:03 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:03 +0100] "GET /private/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:04 +0100] "GET /fw/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:04 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:04 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:05 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:05 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:05 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:06 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:06 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:06 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:07 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:07 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:07 +0100] "GET /wp-admin/ccx/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:07 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:08 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:08 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:08 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:09 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:09 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:09 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:10 +0100] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:10 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:10 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:11 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:11 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:11 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:12 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:12 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:12 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:13 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:13 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:13 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:14 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [11/Jan/2026:08:47:14 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:14 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:15 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:15 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:15 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:16 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:16 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:16 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:17 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:17 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:17 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:18 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:18 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:18 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [11/Jan/2026:08:47:19 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [11/Jan/2026:08:47:19 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:44 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:44 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:45 +0100] "GET /index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:45 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:46 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:46 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:46 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [11/Jan/2026:10:31:47 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:47 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:47 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:48 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:48 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:48 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:49 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:49 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:49 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:50 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:50 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:50 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:51 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:51 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:51 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:52 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:52 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:52 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:53 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:53 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [11/Jan/2026:10:31:53 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:54 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:54 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:54 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:55 +0100] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:55 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:55 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:56 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:56 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:56 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:57 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:57 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:57 +0100] "GET /lock360.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:58 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:58 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:58 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:59 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:31:59 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:31:59 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:32:00 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:32:00 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:32:00 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:32:01 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:32:01 +0100] "GET /upload.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.199 - - [11/Jan/2026:10:32:01 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.199 - - [11/Jan/2026:10:32:02 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.199 - - [11/Jan/2026:10:32:02 +0100] "GET /system.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.221.12 - - [11/Jan/2026:12:08:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 104.23.221.13 - - [11/Jan/2026:12:25:59 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.223.111 - - [11/Jan/2026:12:27:38 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.178.20 - - [11/Jan/2026:13:28:42 +0100] "GET /files.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.47 - - [11/Jan/2026:13:28:43 +0100] "GET /ws.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.178.47 - - [11/Jan/2026:13:28:43 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.47 - - [11/Jan/2026:13:28:43 +0100] "GET /mail.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.178.47 - - [11/Jan/2026:13:28:44 +0100] "GET /tiny.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.47 - - [11/Jan/2026:13:28:44 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.47 - - [11/Jan/2026:13:28:44 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.47 - - [11/Jan/2026:13:28:45 +0100] "GET /system_log.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.47 - - [11/Jan/2026:13:28:45 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.47 - - [11/Jan/2026:13:28:45 +0100] "GET /.well-known/wso112233.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:46 +0100] "GET /log.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:46 +0100] "GET /wp-content/plugins HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:46 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:47 +0100] "GET /wp-includes HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:47 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:48 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:48 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:48 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:49 +0100] "GET /post.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:49 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:49 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:50 +0100] "GET /options.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:50 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:50 +0100] "GET /wordpress/wp-admin/maint HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:51 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:51 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:52 +0100] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:52 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:52 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:53 +0100] "GET /ca5.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:53 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [11/Jan/2026:13:28:53 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:54 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:54 +0100] "GET /cgi-bin HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:55 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:55 +0100] "GET /wp-content/dn.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:55 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:56 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [11/Jan/2026:13:28:56 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:56 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:57 +0100] "GET /ALFA_DATA/alfacgiapi HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:57 +0100] "GET /hehe.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:58 +0100] "GET /mln.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:58 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:58 +0100] "GET /accah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:59 +0100] "GET /gecko-new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:28:59 +0100] "GET /x.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:28:59 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:29:00 +0100] "GET /sf.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:29:00 +0100] "GET /sts.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:29:00 +0100] "GET /wp-includes/css HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:29:01 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [11/Jan/2026:13:29:01 +0100] "GET /xwpg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [11/Jan/2026:13:29:02 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [11/Jan/2026:13:29:02 +0100] "GET /images/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:10:54 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.227.40 - - [11/Jan/2026:15:10:56 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.227.40 - - [11/Jan/2026:15:10:56 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.227.40 - - [11/Jan/2026:15:10:57 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:10:57 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.235.26 - - [11/Jan/2026:15:10:58 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:10:58 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:10:59 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:00 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:00 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:01 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:01 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:02 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:02 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:03 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:03 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:04 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:04 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:05 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:06 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:06 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:07 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:07 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:08 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:08 +0100] "GET /13.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:09 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:09 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:10 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:11 +0100] "GET /php.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:11 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:12 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:12 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:13 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:13 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:14 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:14 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:15 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:16 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:16 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.235.26 - - [11/Jan/2026:15:11:17 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:17 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:18 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:18 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:19 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:19 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:20 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:20 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:21 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:22 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:22 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:23 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:23 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:24 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:24 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:25 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:25 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:26 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:27 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:27 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:28 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:28 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:29 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:29 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:30 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:30 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:31 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:32 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:32 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:33 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:33 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:34 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:34 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:35 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.235.26 - - [11/Jan/2026:15:11:35 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:36 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.235.26 - - [11/Jan/2026:15:11:36 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:37 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:38 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:38 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.235.26 - - [11/Jan/2026:15:11:39 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:24 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.47 - - [11/Jan/2026:15:40:25 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:26 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:26 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:27 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:27 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:28 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:29 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:29 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:30 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.173 - - [11/Jan/2026:15:40:30 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:31 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:31 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:32 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:32 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:33 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:34 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:34 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:35 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:35 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:36 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:36 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:37 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:37 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:38 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:38 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:39 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:40 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:40 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:41 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:41 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.173 - - [11/Jan/2026:15:40:42 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.173 - - [11/Jan/2026:15:40:42 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:43 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:43 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:44 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:44 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:45 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:46 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:46 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:47 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:47 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:48 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.173 - - [11/Jan/2026:15:40:48 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:49 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:49 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:50 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:50 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:51 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.173 - - [11/Jan/2026:15:40:52 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:52 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:53 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:53 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:54 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:54 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:55 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:55 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:56 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:56 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:57 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:58 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:58 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:40:59 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:40:59 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:00 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:00 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:01 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:01 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:02 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:02 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:03 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:04 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:04 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:05 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:05 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:06 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:06 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:07 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:07 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:08 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:08 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:09 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:10 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:10 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.173 - - [11/Jan/2026:15:41:11 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:11 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:12 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:12 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:13 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:13 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:14 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:15 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:15 +0100] "GET /system/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:16 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:16 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:17 +0100] "GET /files/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:17 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:18 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:18 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:19 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:19 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:20 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:21 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:21 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:22 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.173 - - [11/Jan/2026:15:41:22 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:23 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:23 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.173 - - [11/Jan/2026:15:41:24 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.120.251 - - [11/Jan/2026:17:01:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 108.162.246.117 - - [11/Jan/2026:17:04:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.22.24.143 - - [11/Jan/2026:17:33:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.110.131 - - [11/Jan/2026:17:36:01 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:03 +0100] "GET /c99.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:03 +0100] "GET /wp-sample-load.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:03 +0100] "GET /wp-header-json.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:04 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:04 +0100] "GET /old.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:05 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:05 +0100] "GET /ultra.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:05 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:06 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:06 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:07 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:07 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:07 +0100] "GET /check.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:08 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:09 +0100] "GET /inject.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:09 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:10 +0100] "GET /pro.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:10 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:11 +0100] "GET /d.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:11 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:11 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:12 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:13 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:13 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:14 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:14 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:14 +0100] "GET /debug.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:15 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:16 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:16 +0100] "GET /999.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:17 +0100] "GET /system.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:17 +0100] "GET /data.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:17 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:18 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:18 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:18 +0100] "GET /backup.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:19 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:19 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:19 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:20 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:20 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:21 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:21 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:22 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 162.158.138.230 - - [11/Jan/2026:17:36:22 +0100] "GET /shell.exe HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:23 +0100] "GET /u.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:23 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [11/Jan/2026:17:36:24 +0100] "GET /info.phpquebecoils.com HTTP/1.1" 301 162 "-" "-" 172.68.210.207 - - [11/Jan/2026:17:53:57 +0100] "GET /config.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.59 - - [11/Jan/2026:17:53:57 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.59 - - [11/Jan/2026:17:53:58 +0100] "GET /wa/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:53:58 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:53:59 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:53:59 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:53:59 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:54:00 +0100] "GET /wp-conf.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:54:00 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:54:00 +0100] "GET /wp-content/uploads/gravity_forms/g/f/f/b HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:54:01 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:01 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:01 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:54:02 +0100] "GET /wp-includes/blocks HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:02 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.207 - - [11/Jan/2026:17:54:02 +0100] "GET /wp-includes/certificates HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:54:03 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:03 +0100] "GET /wp-includes/js HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:03 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:54:04 +0100] "GET /index.html HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:04 +0100] "GET /up.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:04 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:05 +0100] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:54:05 +0100] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:05 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:06 +0100] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:06 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:06 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:07 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.207 - - [11/Jan/2026:17:54:07 +0100] "GET /wp-includes/js/tinymce/utils HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:07 +0100] "GET /wp-includes/l10n HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:08 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:08 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:08 +0100] "GET /wp-sign.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.207 - - [11/Jan/2026:17:54:09 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.178.111 - - [11/Jan/2026:18:18:35 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.68.164.37 - - [11/Jan/2026:18:18:36 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.107.3 - - [11/Jan/2026:18:18:37 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.88.111 - - [11/Jan/2026:18:18:37 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.216.21 - - [11/Jan/2026:18:18:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.68.164.37 - - [11/Jan/2026:18:18:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.216.21 - - [11/Jan/2026:18:18:40 +0100] "GET /swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.195.71 - - [11/Jan/2026:18:18:41 +0100] "GET /swagger/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 108.162.226.191 - - [11/Jan/2026:18:18:41 +0100] "GET /swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.178.111 - - [11/Jan/2026:18:18:42 +0100] "GET /swagger/swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.224.21 - - [11/Jan/2026:18:18:43 +0100] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.216.21 - - [11/Jan/2026:18:18:44 +0100] "GET /swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.170.251 - - [11/Jan/2026:18:18:44 +0100] "GET /swagger/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 141.101.99.80 - - [11/Jan/2026:18:18:45 +0100] "GET /swagger/v1/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.178.111 - - [11/Jan/2026:18:18:46 +0100] "GET /v2/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.124.48 - - [11/Jan/2026:18:18:46 +0100] "GET /swagger/swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.241.113 - - [11/Jan/2026:18:18:47 +0100] "GET /v3/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.160.251 - - [11/Jan/2026:18:18:48 +0100] "GET /api-docs/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.71.178.111 - - [11/Jan/2026:18:18:49 +0100] "GET /api/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.108.91 - - [11/Jan/2026:18:18:49 +0100] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.85.66 - - [11/Jan/2026:18:18:50 +0100] "GET /@vite/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.162.96 - - [11/Jan/2026:18:18:50 +0100] "GET /swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.69.224.21 - - [11/Jan/2026:18:18:51 +0100] "GET /actuator/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.224.21 - - [11/Jan/2026:18:18:52 +0100] "GET /server HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.224.21 - - [11/Jan/2026:18:18:53 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.176.91 - - [11/Jan/2026:18:18:53 +0100] "GET /swagger/v1/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.88.111 - - [11/Jan/2026:18:18:55 +0100] "GET /v2/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.64.192.20 - - [11/Jan/2026:18:18:55 +0100] "GET /about HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.64.192.20 - - [11/Jan/2026:18:18:56 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.68.242.5 - - [11/Jan/2026:18:18:56 +0100] "GET /v3/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.68.229.15 - - [11/Jan/2026:18:18:57 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.188.88 - - [11/Jan/2026:18:18:57 +0100] "GET /api-docs/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.68.242.5 - - [11/Jan/2026:18:18:57 +0100] "GET /api/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.64.192.20 - - [11/Jan/2026:18:18:58 +0100] "GET /server-status HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.68.242.5 - - [11/Jan/2026:18:18:58 +0100] "GET /@vite/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.69.224.21 - - [11/Jan/2026:18:18:59 +0100] "GET /login.action HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.90.107 - - [11/Jan/2026:18:19:00 +0100] "GET /_all_dbs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.90.107 - - [11/Jan/2026:18:19:01 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.208.109 - - [11/Jan/2026:18:19:01 +0100] "GET /actuator/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.241.113 - - [11/Jan/2026:18:19:03 +0100] "GET /s/5363e2639313e27363e2237313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.175.111 - - [11/Jan/2026:18:19:03 +0100] "GET /server HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.107.4 - - [11/Jan/2026:18:19:03 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.85.66 - - [11/Jan/2026:18:19:04 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.85.66 - - [11/Jan/2026:18:19:05 +0100] "GET /telescope/requests HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 141.101.99.80 - - [11/Jan/2026:18:19:06 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.69.166.99 - - [11/Jan/2026:18:19:06 +0100] "GET /about HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.85.66 - - [11/Jan/2026:18:19:07 +0100] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.162.96 - - [11/Jan/2026:18:19:07 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.68.164.37 - - [11/Jan/2026:18:19:09 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.69.166.99 - - [11/Jan/2026:18:19:09 +0100] "GET /server-status HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.124.48 - - [11/Jan/2026:18:19:11 +0100] "GET /login.action HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.162.96 - - [11/Jan/2026:18:19:12 +0100] "GET /_all_dbs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.175.111 - - [11/Jan/2026:18:19:13 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.175.111 - - [11/Jan/2026:18:19:15 +0100] "GET /s/035313e26373e21323e2430313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.162.96 - - [11/Jan/2026:18:19:17 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.68.242.5 - - [11/Jan/2026:18:19:18 +0100] "GET /telescope/requests HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.68.164.37 - - [11/Jan/2026:18:19:18 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.68.164.37 - - [11/Jan/2026:18:19:19 +0100] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.159.113.111 - - [11/Jan/2026:18:21:35 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.71.182.7 - - [11/Jan/2026:18:22:39 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.209.46 - - [11/Jan/2026:19:00:20 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 104.23.209.46 - - [11/Jan/2026:19:00:20 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 104.23.209.46 - - [11/Jan/2026:19:00:20 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 104.23.209.46 - - [11/Jan/2026:19:00:21 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 104.23.209.46 - - [11/Jan/2026:19:00:21 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.209.46 - - [11/Jan/2026:19:00:21 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 104.23.209.46 - - [11/Jan/2026:19:00:21 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.69.87.95 - - [11/Jan/2026:19:28:45 +0100] "GET /server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:46 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:28:47 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:47 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [11/Jan/2026:19:28:48 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:49 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:49 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:50 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:28:50 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:28:51 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:28:51 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:52 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:52 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:53 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:28:53 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:54 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:55 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:28:55 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:56 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:28:56 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:28:57 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [11/Jan/2026:19:28:57 +0100] "GET /class.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:28:58 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:58 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:28:59 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:00 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:00 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:01 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:01 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:02 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:02 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:03 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:03 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:04 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:05 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:05 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:06 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:06 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:07 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:07 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:08 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:08 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:09 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:10 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:10 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:11 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:11 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:12 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:12 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:13 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:13 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:14 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:14 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:15 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [11/Jan/2026:19:29:16 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:16 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:17 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:17 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:18 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:18 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [11/Jan/2026:19:29:19 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [11/Jan/2026:19:29:19 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:20 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:20 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:21 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:22 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:22 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:23 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:23 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:24 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:24 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:25 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:25 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:26 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:27 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:27 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.95 - - [11/Jan/2026:19:29:28 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:28 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.95 - - [11/Jan/2026:19:29:29 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.95 - - [11/Jan/2026:19:29:29 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.122.179 - - [11/Jan/2026:19:43:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 172.68.234.11 - - [11/Jan/2026:19:43:37 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 172.71.124.49 - - [11/Jan/2026:19:43:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 162.158.171.6 - - [11/Jan/2026:19:43:38 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.23.175.156 - - [11/Jan/2026:20:16:38 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.71.242.159 - - [11/Jan/2026:21:39:51 +0100] "GET /.well-known/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.63.87 - - [11/Jan/2026:21:39:52 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [11/Jan/2026:21:39:52 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [11/Jan/2026:21:39:53 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [11/Jan/2026:21:39:53 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [11/Jan/2026:21:39:53 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.63.87 - - [11/Jan/2026:21:39:53 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [11/Jan/2026:21:39:54 +0100] "GET /admin/controller/extension/extension/jnweppgp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [11/Jan/2026:21:39:54 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [11/Jan/2026:21:39:54 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [11/Jan/2026:21:39:54 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [11/Jan/2026:21:39:55 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [11/Jan/2026:21:39:55 +0100] "GET /css/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [11/Jan/2026:21:39:55 +0100] "GET /db.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:39:56 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:39:56 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:39:56 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [11/Jan/2026:21:39:56 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:39:57 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:39:57 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:39:57 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:39:57 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:39:58 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:39:58 +0100] "GET /sx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:39:58 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:39:58 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:39:59 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:39:59 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:39:59 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:39:59 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:00 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:00 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:00 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:01 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:01 +0100] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php7 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:40:01 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:01 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:02 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [11/Jan/2026:21:40:02 +0100] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:40:02 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:02 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:03 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [11/Jan/2026:21:40:03 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:03 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:40:03 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:04 +0100] "GET /wp-fclass.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:04 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:40:04 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:04 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:40:05 +0100] "GET /wp-includes/Requests/alfa-rex.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:05 +0100] "GET /wp-includes/Requests/src/Cookie/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:05 +0100] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:40:05 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:06 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:06 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:06 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:06 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:07 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:07 +0100] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:07 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:07 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:40:08 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:08 +0100] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [11/Jan/2026:21:40:08 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:40:08 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [11/Jan/2026:21:40:09 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.184.207 - - [11/Jan/2026:22:27:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.39.198 - - [11/Jan/2026:22:36:04 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:05 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:05 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:06 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:06 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:07 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:07 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:07 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:08 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:08 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:08 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:09 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.198 - - [11/Jan/2026:22:36:09 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:09 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:10 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:10 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.198 - - [11/Jan/2026:22:36:10 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:11 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:11 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:11 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:12 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:12 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:12 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:13 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:13 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:13 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:14 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:14 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:14 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:15 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:15 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:15 +0100] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:16 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:16 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:16 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:17 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:17 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:17 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:18 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:18 +0100] "GET /lock360.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:18 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:19 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:19 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:19 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:20 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:20 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:20 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.39.198 - - [11/Jan/2026:22:36:20 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:21 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:21 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:21 +0100] "GET /upload.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:22 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.39.198 - - [11/Jan/2026:22:36:22 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.39.198 - - [11/Jan/2026:22:36:22 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.182.193 - - [11/Jan/2026:23:30:22 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.217.47 - - [11/Jan/2026:23:31:26 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.15.102 - - [12/Jan/2026:00:09:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.64.217.53 - - [12/Jan/2026:01:26:24 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.64.217.53 - - [12/Jan/2026:01:26:24 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.64.217.53 - - [12/Jan/2026:01:26:24 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.64.217.53 - - [12/Jan/2026:01:26:25 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.64.217.53 - - [12/Jan/2026:01:26:25 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.64.217.53 - - [12/Jan/2026:01:26:25 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.64.217.53 - - [12/Jan/2026:01:26:25 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:11 +0100] "GET /server.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.5 - - [12/Jan/2026:01:48:12 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:12 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:12 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:13 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:13 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:14 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:14 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:14 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:15 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.5 - - [12/Jan/2026:01:48:15 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:16 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:16 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:17 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:17 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:17 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:18 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:18 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:19 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:19 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:20 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:20 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:20 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:21 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.5 - - [12/Jan/2026:01:48:21 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:22 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:22 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:22 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:23 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:23 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:24 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:24 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.5 - - [12/Jan/2026:01:48:24 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:25 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:25 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:26 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.5 - - [12/Jan/2026:01:48:26 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:27 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:27 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:27 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:28 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:28 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:29 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:29 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:29 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:30 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:30 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:31 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:31 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:31 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:32 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:32 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:33 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:33 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.242.5 - - [12/Jan/2026:01:48:33 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:34 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:34 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:35 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:35 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:36 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:36 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:36 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:37 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:37 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:38 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:38 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:38 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:39 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:39 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:40 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:40 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:40 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:41 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:41 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:42 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:42 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:43 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:43 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.242.5 - - [12/Jan/2026:01:48:43 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.242.5 - - [12/Jan/2026:01:48:44 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:19 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [12/Jan/2026:02:50:20 +0100] "GET /file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [12/Jan/2026:02:50:21 +0100] "GET /index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [12/Jan/2026:02:50:21 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.199 - - [12/Jan/2026:02:50:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.199 - - [12/Jan/2026:02:50:22 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.199 - - [12/Jan/2026:02:50:22 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.199 - - [12/Jan/2026:02:50:22 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:23 +0100] "GET /wp-admin HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:23 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:23 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:24 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:24 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:24 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:25 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:25 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:25 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:26 +0100] "GET /fm.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:26 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:26 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [12/Jan/2026:02:50:27 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:27 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:27 +0100] "GET /css/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:28 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:28 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:28 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:29 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:29 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:29 +0100] "GET /test.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:29 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:30 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:30 +0100] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.238 - - [12/Jan/2026:02:50:30 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:31 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:31 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:31 +0100] "GET /.tresh/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:32 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:32 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:32 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:33 +0100] "GET /lock360.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:33 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:33 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:34 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:34 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:34 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:35 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:35 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:35 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:36 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:36 +0100] "GET /file5.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.238 - - [12/Jan/2026:02:50:36 +0100] "GET /upload.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:37 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:37 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.238 - - [12/Jan/2026:02:50:37 +0100] "GET /system.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:17 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.179.155 - - [12/Jan/2026:04:36:19 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.155 - - [12/Jan/2026:04:36:20 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.179.155 - - [12/Jan/2026:04:36:20 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:21 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:21 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:22 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:23 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:23 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:24 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:24 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:25 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:25 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:26 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:26 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:27 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:28 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:28 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:29 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:29 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:30 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.213 - - [12/Jan/2026:04:36:30 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:31 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:31 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:32 +0100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:33 +0100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:33 +0100] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:34 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:34 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:35 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:35 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:36 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:36 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:37 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:38 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:38 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:39 +0100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:39 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:40 +0100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:40 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:41 +0100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:41 +0100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:42 +0100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:42 +0100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:43 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:44 +0100] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:44 +0100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.213 - - [12/Jan/2026:04:36:45 +0100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:45 +0100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:46 +0100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:46 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:47 +0100] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:47 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:48 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:49 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:49 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:50 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:50 +0100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:51 +0100] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:51 +0100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:52 +0100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:52 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:53 +0100] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:54 +0100] "GET /wp-includes/html-api/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:54 +0100] "GET /wp-includes/php-compat/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:55 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:55 +0100] "GET /wp-includes/random_compat/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:56 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:56 +0100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:57 +0100] "GET /wp-includes/style-engine/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.213 - - [12/Jan/2026:04:36:57 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:36:58 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:36:58 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.213 - - [12/Jan/2026:04:36:59 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:00 +0100] "GET /.well-knownold/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:00 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:01 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:01 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:02 +0100] "GET /upload/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.213 - - [12/Jan/2026:04:37:02 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:37:03 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:03 +0100] "GET /admin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:04 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:05 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:37:05 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:06 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:06 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:37:07 +0100] "GET /Public/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:07 +0100] "GET /vendor/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:08 +0100] "GET /local/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:37:08 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:09 +0100] "GET /Site/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:10 +0100] "GET /system/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:10 +0100] "GET /template/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:11 +0100] "GET /shop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.213 - - [12/Jan/2026:04:37:11 +0100] "GET /files/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:37:12 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:12 +0100] "GET /include/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:37:13 +0100] "GET /Assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:13 +0100] "GET /images/stories/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:37:14 +0100] "GET /plugins/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:37:15 +0100] "GET /php/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:15 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:16 +0100] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:16 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:17 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.213 - - [12/Jan/2026:04:37:17 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:18 +0100] "GET /components/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.213 - - [12/Jan/2026:04:37:18 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.146.74 - - [12/Jan/2026:06:20:27 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.23.178 - - [12/Jan/2026:06:24:35 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.159.113.110 - - [12/Jan/2026:06:32:48 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.10 - - [12/Jan/2026:06:32:48 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.166.72 - - [12/Jan/2026:06:32:48 +0100] "GET /.env.local HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.10 - - [12/Jan/2026:06:32:48 +0100] "GET /.env.production HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.47.96 - - [12/Jan/2026:06:32:49 +0100] "GET /.env.staging HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.10 - - [12/Jan/2026:06:32:49 +0100] "GET /.env.dev HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.182.6 - - [12/Jan/2026:06:32:51 +0100] "GET /.env.old HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.19 - - [12/Jan/2026:06:32:52 +0100] "GET /.env.aws HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.103.105 - - [12/Jan/2026:06:32:56 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.47.96 - - [12/Jan/2026:06:32:56 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.95.129 - - [12/Jan/2026:06:32:56 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.110 - - [12/Jan/2026:06:32:57 +0100] "GET /_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.182.6 - - [12/Jan/2026:06:32:57 +0100] "GET /php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.76.157 - - [12/Jan/2026:06:32:57 +0100] "GET /server-status HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.10 - - [12/Jan/2026:06:32:57 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.182.6 - - [12/Jan/2026:06:32:57 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.47.96 - - [12/Jan/2026:06:32:58 +0100] "GET /phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:39 +0100] "GET /config.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:39 +0100] "GET /ini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:39 +0100] "GET /wa/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:40 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:40 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:40 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:41 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:41 +0100] "GET /wp-conf.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:41 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:41 +0100] "GET /wp-content/uploads/gravity_forms/g/f/f/b HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:42 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:42 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:42 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:42 +0100] "GET /wp-includes/blocks HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.54 - - [12/Jan/2026:07:16:43 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:43 +0100] "GET /wp-includes/certificates HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:43 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:43 +0100] "GET /wp-includes/js HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:44 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:44 +0100] "GET /index.html HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:44 +0100] "GET /up.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:44 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:45 +0100] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:45 +0100] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.54 - - [12/Jan/2026:07:16:45 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:45 +0100] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:46 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:46 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.54 - - [12/Jan/2026:07:16:46 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:46 +0100] "GET /wp-includes/js/tinymce/utils HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:47 +0100] "GET /wp-includes/l10n HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:47 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.54 - - [12/Jan/2026:07:16:47 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:47 +0100] "GET /wp-sign.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.54 - - [12/Jan/2026:07:16:48 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.22.24.142 - - [12/Jan/2026:07:21:50 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.71.26 - - [12/Jan/2026:07:21:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.87.96 - - [12/Jan/2026:07:29:26 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:27 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:28 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:28 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:29 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:30 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [12/Jan/2026:07:29:30 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:31 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:31 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:32 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:33 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:33 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:34 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:34 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:35 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:35 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:36 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:37 +0100] "GET /info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:37 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:38 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:38 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:39 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:40 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:40 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:41 +0100] "GET /13.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:42 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:42 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:43 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:43 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:44 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:45 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:45 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:46 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:46 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:47 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:47 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:48 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:49 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:49 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:50 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:50 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:51 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:51 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:52 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:53 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [12/Jan/2026:07:29:53 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:54 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:55 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:55 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:56 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [12/Jan/2026:07:29:56 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:57 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:58 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:29:58 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:29:59 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:00 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:00 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:01 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:01 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:02 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:30:02 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:03 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:04 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:04 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:05 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.87.96 - - [12/Jan/2026:07:30:05 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:30:06 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:30:06 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:07 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:08 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:30:08 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:30:09 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:09 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:30:10 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:30:10 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:11 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:12 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.87.96 - - [12/Jan/2026:07:30:12 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:30:13 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [12/Jan/2026:07:30:14 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.162.96 - - [12/Jan/2026:09:21:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.69.166.99 - - [12/Jan/2026:09:21:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.175.110 - - [12/Jan/2026:09:21:57 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.110 - - [12/Jan/2026:09:21:57 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 104.23.175.110 - - [12/Jan/2026:09:21:58 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 104.23.175.110 - - [12/Jan/2026:09:21:58 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.110 - - [12/Jan/2026:09:21:58 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 104.23.175.110 - - [12/Jan/2026:09:21:59 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.110 - - [12/Jan/2026:09:21:59 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 104.23.175.110 - - [12/Jan/2026:09:22:00 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.110 - - [12/Jan/2026:09:22:00 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.71.124.49 - - [12/Jan/2026:11:14:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.111 - - [12/Jan/2026:11:14:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.108.90 - - [12/Jan/2026:11:14:48 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 162.158.108.123 - - [12/Jan/2026:11:14:48 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.108.123 - - [12/Jan/2026:11:14:49 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.108.123 - - [12/Jan/2026:11:14:49 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.108.123 - - [12/Jan/2026:11:14:50 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.108.123 - - [12/Jan/2026:11:14:50 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.108.123 - - [12/Jan/2026:11:14:51 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 162.158.108.123 - - [12/Jan/2026:11:14:51 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 162.158.108.123 - - [12/Jan/2026:11:14:52 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.87.62 - - [12/Jan/2026:11:15:59 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.71.242.159 - - [12/Jan/2026:11:32:25 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:26 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:26 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:26 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.63.87 - - [12/Jan/2026:11:32:27 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:27 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:27 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [12/Jan/2026:11:32:28 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:28 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [12/Jan/2026:11:32:28 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:28 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [12/Jan/2026:11:32:29 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [12/Jan/2026:11:32:29 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.63.87 - - [12/Jan/2026:11:32:29 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:29 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:30 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:30 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:30 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.63.87 - - [12/Jan/2026:11:32:31 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:31 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:31 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:31 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:32 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:32 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:32 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:32 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:33 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:33 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:33 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:34 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:34 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:34 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:34 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:35 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:35 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:35 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:36 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:36 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:36 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:36 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:37 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:37 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:37 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:38 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:38 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:38 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:38 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:39 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:39 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:39 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:39 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:40 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:40 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:40 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:41 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:41 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [12/Jan/2026:11:32:41 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:41 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:42 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:42 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:42 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:42 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:43 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:43 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:43 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:44 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:44 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:44 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:44 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:45 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:45 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:45 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:45 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:46 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:46 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:46 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:46 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:47 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:47 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:47 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:48 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:48 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:48 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:48 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:49 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:49 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:49 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:49 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:50 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:50 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:50 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:50 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.242.159 - - [12/Jan/2026:11:32:51 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:51 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:51 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:52 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:52 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:52 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:52 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:53 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:53 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:53 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:53 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:54 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:54 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:54 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:54 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:55 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:55 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:55 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:56 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:56 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:56 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:56 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:57 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:57 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:57 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:58 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.242.159 - - [12/Jan/2026:11:32:58 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:58 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:58 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:59 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:59 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:59 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:32:59 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:33:00 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:33:00 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.242.159 - - [12/Jan/2026:11:33:00 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.176.90 - - [12/Jan/2026:11:37:53 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 104.23.175.110 - - [12/Jan/2026:11:37:54 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.68.210.206 - - [12/Jan/2026:12:05:04 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:05 +0100] "GET /bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:05 +0100] "GET /byp8.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:06 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:06 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:06 +0100] "GET /wp-admin/css/colors/coffee HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:07 +0100] "GET /wp-content/themes/twentytwentyfive/functions.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:07 +0100] "GET /wp-content/upgrade HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:07 +0100] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:08 +0100] "GET /wp-includes/Requests HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:08 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:08 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:09 +0100] "GET /ws28.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:09 +0100] "GET /admin-header.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:09 +0100] "GET /c.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:10 +0100] "GET /edit-tags.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:10 +0100] "GET /ee.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:10 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:11 +0100] "GET /lu4.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:11 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:11 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:12 +0100] "GET /wp-content/themes/x/bypass.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:12 +0100] "GET /wp-includes/Text/Diff/Renderer HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:12 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:13 +0100] "GET /wp-includes/header.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:13 +0100] "GET /xleet.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:13 +0100] "GET /.well-known/fierzashell.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [12/Jan/2026:12:05:14 +0100] "GET /0x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:14 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:14 +0100] "GET /files HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:15 +0100] "GET /jga.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [12/Jan/2026:12:05:15 +0100] "GET /mini HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:15 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:16 +0100] "GET /s.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:16 +0100] "GET /style.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:16 +0100] "GET /t.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:17 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:17 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:17 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:18 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:18 +0100] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:18 +0100] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:19 +0100] "GET /wp-includes/assets HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:19 +0100] "GET /wp-includes/images/media HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:19 +0100] "GET /wp-includes/pomo HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:20 +0100] "GET /wp-info.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:20 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:20 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:21 +0100] "GET /ynz.PhP7 HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [12/Jan/2026:12:05:21 +0100] "GET /.trash7206/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:21 +0100] "GET /admin/controller/extension/extension HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [12/Jan/2026:12:05:22 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:22 +0100] "GET /cgi-bin/about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [12/Jan/2026:12:05:22 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:35:55 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.77 - - [12/Jan/2026:12:35:55 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.77 - - [12/Jan/2026:12:35:56 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.77 - - [12/Jan/2026:12:35:56 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.77 - - [12/Jan/2026:12:35:56 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.77 - - [12/Jan/2026:12:35:56 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.77 - - [12/Jan/2026:12:35:57 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:35:57 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:35:57 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:35:57 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [12/Jan/2026:12:35:58 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:35:58 +0100] "GET /install.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:35:58 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:35:58 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [12/Jan/2026:12:35:59 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:35:59 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:35:59 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:35:59 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:00 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:00 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:00 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:01 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:01 +0100] "GET /gelay.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:01 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:01 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:02 +0100] "GET /fx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:02 +0100] "GET /black.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:02 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:02 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:03 +0100] "GET /s.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:03 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:03 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:03 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:04 +0100] "GET /defaults.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:04 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [12/Jan/2026:12:36:04 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [12/Jan/2026:12:36:04 +0100] "GET /wp-xml.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:05 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:05 +0100] "GET /wp1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:05 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:05 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:06 +0100] "GET /wp-admin/alfa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:06 +0100] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:06 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.118.244 - - [12/Jan/2026:12:36:07 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:07 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:07 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:07 +0100] "GET /wp-content/mini.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:08 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:08 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:08 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:08 +0100] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:09 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:09 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:09 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:09 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:10 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:10 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:10 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:10 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:11 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:11 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:11 +0100] "GET /images/wso.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:11 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:12 +0100] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:12 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:12 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:12 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:13 +0100] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:13 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:13 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:14 +0100] "GET /wp-content/themes/twentyfourteen/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:14 +0100] "GET /wp-content/themes/twentyfifteen/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:14 +0100] "GET /wp-content/themes/twentyfifteen/404.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:14 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:15 +0100] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:15 +0100] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:15 +0100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.118.244 - - [12/Jan/2026:12:36:15 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.118.244 - - [12/Jan/2026:12:36:16 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.170.37 - - [12/Jan/2026:13:21:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.71.95.96 - - [12/Jan/2026:13:21:20 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 104.23.221.13 - - [12/Jan/2026:13:50:18 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.223.110 - - [12/Jan/2026:13:52:12 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.71.246.101 - - [12/Jan/2026:14:26:32 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.71.232.80 - - [12/Jan/2026:15:32:22 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.126.60 - - [12/Jan/2026:15:32:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.118.132 - - [12/Jan/2026:15:37:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.42.178 - - [12/Jan/2026:15:41:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.213.194 - - [12/Jan/2026:15:41:47 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.225.149 - - [12/Jan/2026:15:48:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 162.158.138.239 - - [12/Jan/2026:16:10:08 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:09 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:09 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:09 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:10 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:10 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:10 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:11 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:11 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:11 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:12 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:12 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:12 +0100] "GET /av.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:13 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:13 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:13 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:14 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:14 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:14 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:15 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:15 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:15 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:16 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:16 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:16 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:16 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:17 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:17 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [12/Jan/2026:16:10:17 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:18 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:18 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:18 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [12/Jan/2026:16:10:19 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:19 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:19 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:20 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.138.239 - - [12/Jan/2026:16:10:20 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:20 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:21 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:21 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:22 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.138.239 - - [12/Jan/2026:16:10:22 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:22 +0100] "GET /uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:23 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:23 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.138.239 - - [12/Jan/2026:16:10:23 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.111.161 - - [12/Jan/2026:16:15:59 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.114.4 - - [12/Jan/2026:16:15:59 +0100] "GET /_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.203.120 - - [12/Jan/2026:16:16:00 +0100] "POST / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:00 +0100] "GET /wp-content HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:01 +0100] "GET /404.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:01 +0100] "GET /av.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:01 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:02 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:02 +0100] "GET /wp-content/uploads HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [12/Jan/2026:16:31:02 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:03 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:03 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:03 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:04 +0100] "GET /wp-content/plugins/WordPressCore HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:04 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:04 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:05 +0100] "GET /wp-includes/fonts HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:05 +0100] "GET /wso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [12/Jan/2026:16:31:05 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:06 +0100] "GET /wp-content/plugins/shell/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:06 +0100] "GET /as.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:06 +0100] "GET /wp-admin/js HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:07 +0100] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:07 +0100] "GET /wp-admin/includes HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:07 +0100] "GET /fonts/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [12/Jan/2026:16:31:08 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:08 +0100] "GET /text.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:08 +0100] "GET /baxa1.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:09 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:09 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:09 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:10 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:10 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:10 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:11 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:11 +0100] "GET /wp-admin/js/widgets HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:11 +0100] "GET /.well-known HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:12 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:12 +0100] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:12 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [12/Jan/2026:16:31:13 +0100] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:13 +0100] "GET /item.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:13 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:14 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:14 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:14 +0100] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:15 +0100] "GET /wp-error.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:15 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:15 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.110.130 - - [12/Jan/2026:16:31:16 +0100] "GET /assets HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.110.130 - - [12/Jan/2026:16:31:16 +0100] "GET /class.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:16 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:17 +0100] "GET /wp-admin/maint HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:17 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:17 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.110.130 - - [12/Jan/2026:16:31:18 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:29:40 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.88 - - [12/Jan/2026:18:29:47 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:29:56 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:04 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:07 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:10 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:30:13 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:15 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:16 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:18 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:19 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:23 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:24 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:26 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:28 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:30:31 +0100] "GET /jp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:30:35 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:36 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:38 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:40 +0100] "GET /fonts/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:30:42 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.88.111 - - [12/Jan/2026:18:30:44 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:48 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:30:49 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:50 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:52 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:54 +0100] "GET /wp-content/ai1wm-backups/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:30:57 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:30:58 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:30:59 +0100] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:31:01 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:02 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:04 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:05 +0100] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:31:07 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:08 +0100] "GET /public/fonts/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:31:10 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:12 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:13 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:15 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:31:16 +0100] "GET /wp-includes/blocks/buttons/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:31:18 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:31:20 +0100] "GET /wp-includes/blocks/list-item/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:31:22 +0100] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:24 +0100] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:25 +0100] "GET /wp-includes/blocks/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:31:27 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:18:31:29 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:18:31:31 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.113.110 - - [12/Jan/2026:20:22:59 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 104.23.187.227 - - [12/Jan/2026:20:43:13 +0100] "GET /userfuns.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:37 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:37 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:38 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:38 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:38 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:38 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:39 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:39 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:39 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:39 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:40 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:40 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:40 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:41 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:41 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:41 +0100] "GET /jp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:41 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:42 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [12/Jan/2026:22:01:42 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:42 +0100] "GET /fonts/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:42 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:43 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:43 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:43 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:43 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:44 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:44 +0100] "GET /wp-content/ai1wm-backups/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:44 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:44 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:45 +0100] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:45 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:45 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:46 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:46 +0100] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:46 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:46 +0100] "GET /public/fonts/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:47 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:47 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:47 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:47 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:48 +0100] "GET /wp-includes/blocks/buttons/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:48 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:48 +0100] "GET /wp-includes/blocks/list-item/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:48 +0100] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:49 +0100] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:49 +0100] "GET /wp-includes/blocks/search/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:49 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [12/Jan/2026:22:01:49 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [12/Jan/2026:22:01:50 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.78.93 - - [12/Jan/2026:22:06:52 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 162.158.78.93 - - [12/Jan/2026:22:06:53 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 162.158.78.93 - - [12/Jan/2026:22:06:53 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 162.158.78.93 - - [12/Jan/2026:22:06:53 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 162.158.78.93 - - [12/Jan/2026:22:06:53 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 162.158.78.93 - - [12/Jan/2026:22:06:53 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 162.158.78.93 - - [12/Jan/2026:22:06:54 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 104.23.217.46 - - [12/Jan/2026:22:33:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 162.158.103.4 - - [12/Jan/2026:23:18:01 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; pt-BR; rv:1.8.0.3) Gecko/20060523 Ubuntu/dapper Firefox/1.5.0.3" 172.64.200.182 - - [12/Jan/2026:23:18:01 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.7.8) Gecko/20050512 Firefox/1.0.4" 104.23.221.12 - - [12/Jan/2026:23:18:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.113 Safari/537.36" 104.23.223.133 - - [12/Jan/2026:23:18:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; PPC Mac OS X 10_10_5) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0.3 Safari/602.4.8" 172.68.183.72 - - [12/Jan/2026:23:18:02 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.0; rv:16.0) Firefox/13.0" 172.64.200.182 - - [12/Jan/2026:23:18:03 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:54.0) Gecko/20100101 Firefox/54.0" 104.23.223.133 - - [12/Jan/2026:23:18:03 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Opera/8.51 (Windows NT 5.1; U; fr)" 172.64.198.229 - - [12/Jan/2026:23:18:04 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.37 (KHTML, like Gecko) Version/9.0 Safari/601.1.37" 104.23.217.153 - - [12/Jan/2026:23:18:04 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; ASU2JS; rv:11.0) like Gecko" 162.158.172.104 - - [12/Jan/2026:23:18:05 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "More Opera 6.01 user agents strings -->>" 162.158.103.83 - - [12/Jan/2026:23:18:05 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows XP; U) Opera 6.05 [de]" 172.64.200.182 - - [12/Jan/2026:23:18:06 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 7.1.2; Redmi Note 5 Build/N2G47H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.84 Mobile Safari/537.36" 162.158.103.83 - - [12/Jan/2026:23:18:07 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.801.0 Safari/535.1" 104.23.221.159 - - [12/Jan/2026:23:18:07 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.12pre) Gecko/20080122 Firefox/2.0.0.12pre" 172.64.198.229 - - [12/Jan/2026:23:18:09 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b4pre) Gecko/20100815 Minefield/4.0b4pre" 104.23.221.159 - - [12/Jan/2026:23:18:10 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.8.0.9) Gecko/20061206 Firefox/1.5.0.9" 162.158.88.111 - - [12/Jan/2026:23:25:05 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.88 - - [12/Jan/2026:23:25:06 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.88 - - [12/Jan/2026:23:25:06 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.88 - - [12/Jan/2026:23:25:07 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.88 - - [12/Jan/2026:23:25:07 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.88 - - [12/Jan/2026:23:25:08 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.88.88 - - [12/Jan/2026:23:25:08 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.88 - - [12/Jan/2026:23:25:09 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.88.88 - - [12/Jan/2026:23:25:09 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:09 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:10 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:10 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:11 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:11 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:12 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:12 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:13 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:13 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:14 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:14 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:15 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:15 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:16 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:16 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:16 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:17 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:17 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:18 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:18 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:19 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:19 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:20 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:20 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:21 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:21 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:22 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:22 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:23 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:23 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:24 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:24 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:25 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:25 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:26 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:26 +0100] "GET /av.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.88.111 - - [12/Jan/2026:23:25:26 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:27 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:27 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:28 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:28 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:29 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:29 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:30 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:30 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:31 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:31 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:32 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:32 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:33 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:33 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:33 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:34 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:34 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.88.111 - - [12/Jan/2026:23:25:35 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:35 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:36 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:36 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:37 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:37 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:38 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:38 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:39 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:39 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:40 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:40 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.88.111 - - [12/Jan/2026:23:25:41 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:41 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:41 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:42 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:42 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.88.111 - - [12/Jan/2026:23:25:43 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:43 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:44 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:44 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:45 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:45 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:46 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:46 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:47 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:47 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:48 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:48 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.88.111 - - [12/Jan/2026:23:25:49 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:49 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:49 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:50 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:50 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:51 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:51 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:52 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:52 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:53 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:53 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:54 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:54 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:55 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:55 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:56 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:56 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:57 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:57 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:25:58 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:58 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:59 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:59 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:25:59 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:26:00 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:26:00 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:26:01 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:26:01 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:26:02 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:26:02 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:26:03 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:26:03 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:26:04 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:26:04 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.88.111 - - [12/Jan/2026:23:26:05 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:26:05 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.88.111 - - [12/Jan/2026:23:26:06 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.172.21 - - [13/Jan/2026:00:14:54 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.164.111 - - [13/Jan/2026:00:15:51 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.95.130 - - [13/Jan/2026:01:28:59 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.68.2.87 - - [13/Jan/2026:01:56:36 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.68.3.34 - - [13/Jan/2026:01:56:36 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.68.3.34 - - [13/Jan/2026:01:56:36 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.68.3.34 - - [13/Jan/2026:01:56:36 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.68.3.34 - - [13/Jan/2026:01:56:36 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.68.3.34 - - [13/Jan/2026:01:56:37 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.68.3.34 - - [13/Jan/2026:01:56:37 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 108.162.226.191 - - [13/Jan/2026:06:32:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.110 - - [13/Jan/2026:06:32:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.166.99 - - [13/Jan/2026:06:32:41 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.162.97 - - [13/Jan/2026:06:32:41 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.71.124.48 - - [13/Jan/2026:06:32:42 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.71.124.48 - - [13/Jan/2026:06:32:43 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.71.124.48 - - [13/Jan/2026:06:32:43 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.71.124.48 - - [13/Jan/2026:06:32:43 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.71.124.48 - - [13/Jan/2026:06:32:44 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.71.124.48 - - [13/Jan/2026:06:32:44 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.110 - - [13/Jan/2026:06:32:45 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.70.207.143 - - [13/Jan/2026:07:33:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.221.12 - - [13/Jan/2026:08:03:34 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.223.111 - - [13/Jan/2026:08:07:22 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.69.130.30 - - [13/Jan/2026:09:20:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 162.158.107.3 - - [13/Jan/2026:09:53:12 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:13 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:14 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.107.3 - - [13/Jan/2026:09:53:14 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:15 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:15 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:16 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:16 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.107.3 - - [13/Jan/2026:09:53:16 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:17 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.107.3 - - [13/Jan/2026:09:53:17 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:18 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:19 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:19 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:20 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:20 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:21 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:22 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:23 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:24 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:27 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:29 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:30 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:31 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:32 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:33 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:34 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:34 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:35 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:36 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:37 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:37 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:38 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:38 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:38 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:39 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:39 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:40 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:40 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:41 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:41 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:42 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.107.3 - - [13/Jan/2026:09:53:42 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:42 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:43 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:43 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.107.3 - - [13/Jan/2026:09:53:44 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:44 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:45 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:45 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:45 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:46 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:46 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:47 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:47 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:48 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:48 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:48 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:49 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:49 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:50 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:50 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:51 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:51 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:52 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:53 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:53 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:54 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:55 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:55 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:56 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:53:57 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:53:58 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.107.3 - - [13/Jan/2026:09:53:59 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:01 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:05 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:08 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:09 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:10 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:10 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:10 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:11 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:11 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:12 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:12 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:12 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:13 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:13 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:14 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:14 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:15 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:15 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:15 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:16 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:16 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:17 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:17 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:18 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:18 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:18 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:19 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:19 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:20 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:20 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:20 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:21 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:21 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:22 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:22 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:23 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:23 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:23 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:24 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:24 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:25 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:25 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:25 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:26 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:26 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:27 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:29 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:30 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:31 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:31 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:32 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.107.3 - - [13/Jan/2026:09:54:32 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:33 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:33 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.107.3 - - [13/Jan/2026:09:54:33 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 104.23.172.11 - - [13/Jan/2026:10:12:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:144.0) Gecko/20100101 Firefox/144.0" 141.101.76.188 - - [13/Jan/2026:10:12:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:144.0) Gecko/20100101 Firefox/144.0" 162.158.186.250 - - [13/Jan/2026:11:57:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Python/3.9 aiohttp/3.8.1" 104.23.221.12 - - [13/Jan/2026:11:57:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0" 162.158.183.70 - - [13/Jan/2026:11:57:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0" 188.114.111.196 - - [13/Jan/2026:11:58:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36" 172.70.47.95 - - [13/Jan/2026:11:58:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 172.71.164.110 - - [13/Jan/2026:11:58:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 172.70.247.95 - - [13/Jan/2026:11:58:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" 172.70.242.221 - - [13/Jan/2026:11:59:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/14A346 Safari/602.1" 172.71.148.182 - - [13/Jan/2026:11:59:09 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36" 108.162.216.174 - - [13/Jan/2026:11:59:29 +0100] "HEAD / HTTP/1.1" 301 0 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 172.69.17.38 - - [13/Jan/2026:11:59:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 172.69.17.38 - - [13/Jan/2026:11:59:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 104.22.1.199 - - [13/Jan/2026:11:59:29 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.126.44 - - [13/Jan/2026:11:59:39 +0100] "HEAD / HTTP/1.1" 301 0 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 172.70.126.84 - - [13/Jan/2026:11:59:42 +0100] "GET /js/main.js HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 108.162.216.110 - - [13/Jan/2026:11:59:42 +0100] "GET /js/jquery.flexslider-min.js HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 172.70.126.93 - - [13/Jan/2026:11:59:42 +0100] "GET /js/modernizr.js HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 162.158.178.20 - - [13/Jan/2026:12:00:00 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:01 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:01 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:01 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:02 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:02 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:02 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:03 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [13/Jan/2026:12:00:03 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:03 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:04 +0100] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:04 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:05 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:05 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:05 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:06 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:06 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:06 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:07 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:07 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:07 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [13/Jan/2026:12:00:08 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:08 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:08 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:09 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:09 +0100] "GET /alfa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:09 +0100] "GET /api.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [13/Jan/2026:12:00:10 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:10 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:11 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:11 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:11 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:12 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:12 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:12 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [13/Jan/2026:12:00:13 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:13 +0100] "GET /mini HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:13 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:14 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:14 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:15 +0100] "GET /ahax.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:15 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:15 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:16 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:16 +0100] "GET /av.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:16 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:17 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:17 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [13/Jan/2026:12:00:17 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:18 +0100] "GET /images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:18 +0100] "GET /index/function.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:18 +0100] "GET /inputs.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:19 +0100] "GET /mah.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:19 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:20 +0100] "GET /mini.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:20 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:20 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:21 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:21 +0100] "GET /simple.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:21 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:22 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:22 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:22 +0100] "GET /public/files/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:23 +0100] "GET /public/wp-content/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:23 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:23 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:24 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:24 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:24 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:25 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:25 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:26 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [13/Jan/2026:12:00:26 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:26 +0100] "GET /wp-content/et-cache/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:27 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:27 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:27 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:28 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:28 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:28 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:29 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:29 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:29 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:30 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:30 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:30 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:31 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:31 +0100] "GET /wp-includes/random_compat/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:32 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:32 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:32 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:33 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:33 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:33 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:34 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:34 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:34 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:35 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:35 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:35 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:36 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:36 +0100] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:36 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:37 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [13/Jan/2026:12:00:37 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:38 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:38 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:38 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.175.31 - - [13/Jan/2026:12:00:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:39 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:39 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:39 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:40 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:40 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:41 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:41 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:41 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:42 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [13/Jan/2026:12:00:42 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:42 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:43 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:43 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.158.178.20 - - [13/Jan/2026:12:00:44 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.158.178.20 - - [13/Jan/2026:12:00:44 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:44 +0100] "GET /wp-includes/rest-api/search/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:45 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:45 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:45 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:46 +0100] "GET /x.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.158.178.20 - - [13/Jan/2026:12:00:46 +0100] "GET /yas.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.127.138 - - [13/Jan/2026:12:02:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36" 104.23.190.192 - - [13/Jan/2026:12:19:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 172.71.144.21 - - [13/Jan/2026:12:32:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 172.70.126.44 - - [13/Jan/2026:12:59:14 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 172.70.240.204 - - [13/Jan/2026:13:00:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 172.71.147.174 - - [13/Jan/2026:13:03:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.71.147.174 - - [13/Jan/2026:13:03:39 +0100] "GET /images/twitter.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.71.146.113 - - [13/Jan/2026:13:03:39 +0100] "GET /js/jquery.flexslider-min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.71.147.234 - - [13/Jan/2026:13:03:39 +0100] "GET /images/default.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 108.162.245.206 - - [13/Jan/2026:13:03:39 +0100] "GET /images/google.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.71.151.185 - - [13/Jan/2026:13:03:39 +0100] "GET /css/rightslide.css HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.71.146.174 - - [13/Jan/2026:13:03:39 +0100] "GET /images/pronat/slider2.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 108.162.245.58 - - [13/Jan/2026:13:03:39 +0100] "GET /images/icon3.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.71.146.101 - - [13/Jan/2026:13:03:39 +0100] "GET /images/pronat/slider1.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 108.162.246.200 - - [13/Jan/2026:13:03:39 +0100] "GET /images/logo.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.68.23.167 - - [13/Jan/2026:13:03:39 +0100] "GET /images/pronat/slider3.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 162.159.120.201 - - [13/Jan/2026:13:03:39 +0100] "GET /css/style.css HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 108.162.245.173 - - [13/Jan/2026:13:03:39 +0100] "GET /images/icon1.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 108.162.246.209 - - [13/Jan/2026:13:03:39 +0100] "GET /js/modernizr.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.71.151.109 - - [13/Jan/2026:13:03:39 +0100] "GET /images/icon2.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 162.158.41.140 - - [13/Jan/2026:13:03:39 +0100] "GET /images/youtube.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 108.162.246.15 - - [13/Jan/2026:13:03:39 +0100] "GET /images/tr.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.68.22.49 - - [13/Jan/2026:13:03:39 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 108.162.246.124 - - [13/Jan/2026:13:03:39 +0100] "GET /images/sq_al.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 162.158.42.231 - - [13/Jan/2026:13:03:39 +0100] "GET /css/lib.css HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 108.162.245.15 - - [13/Jan/2026:13:03:39 +0100] "GET /images/default.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.68.23.69 - - [13/Jan/2026:13:03:39 +0100] "GET /images/sq_al.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 108.162.245.163 - - [13/Jan/2026:13:03:39 +0100] "GET /js/main.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.71.150.120 - - [13/Jan/2026:13:03:39 +0100] "GET /css/zsg-core.css HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 172.68.23.19 - - [13/Jan/2026:13:03:39 +0100] "GET /images/facebook.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 104.23.198.7 - - [13/Jan/2026:13:05:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36" 162.158.88.111 - - [13/Jan/2026:13:07:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.68.164.37 - - [13/Jan/2026:13:07:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.39.104 - - [13/Jan/2026:13:07:21 +0100] "GET / HTTP/1.1" 301 162 "-" "axios/1.13.2" 172.69.166.98 - - [13/Jan/2026:13:07:22 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 172.69.166.98 - - [13/Jan/2026:13:07:23 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.71.191.73 - - [13/Jan/2026:13:07:23 +0100] "GET / HTTP/1.1" 301 162 "-" "axios/1.13.2" 172.69.166.98 - - [13/Jan/2026:13:07:23 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.69.166.98 - - [13/Jan/2026:13:07:24 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.69.166.98 - - [13/Jan/2026:13:07:24 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.69.166.98 - - [13/Jan/2026:13:07:25 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.69.166.98 - - [13/Jan/2026:13:07:25 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.69.166.98 - - [13/Jan/2026:13:07:26 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.69.166.98 - - [13/Jan/2026:13:07:26 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.223.111 - - [13/Jan/2026:13:09:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 172.71.194.122 - - [13/Jan/2026:13:30:10 +0100] "GET / HTTP/1.1" 301 162 "-" "axios/1.13.2" 172.71.191.73 - - [13/Jan/2026:13:30:11 +0100] "GET / HTTP/1.1" 301 162 "-" "axios/1.13.2" 104.23.211.194 - - [13/Jan/2026:13:50:04 +0100] "GET / HTTP/1.1" 301 162 "-" "axios/1.13.2" 172.71.191.73 - - [13/Jan/2026:13:50:06 +0100] "GET / HTTP/1.1" 301 162 "-" "axios/1.13.2" 104.22.1.198 - - [13/Jan/2026:14:04:01 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.22.17.247 - - [13/Jan/2026:14:31:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 Safari/604.1" 172.69.87.96 - - [13/Jan/2026:14:31:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.23.199.167 - - [13/Jan/2026:14:31:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36" 162.158.167.183 - - [13/Jan/2026:14:32:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 YaBrowser/25.12.3.679.10 SA/3 Mobile/15E148 Safari/604.1" 162.159.113.110 - - [13/Jan/2026:15:02:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 162.159.113.110 - - [13/Jan/2026:15:02:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 172.70.94.124 - - [13/Jan/2026:15:33:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.159.106.112 - - [13/Jan/2026:15:33:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.23.175.157 - - [13/Jan/2026:16:58:58 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.70.223.5 - - [13/Jan/2026:17:44:53 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.224 - - [13/Jan/2026:17:44:54 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:44:54 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [13/Jan/2026:17:44:55 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:44:55 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:44:55 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:44:55 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:44:56 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:44:56 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:44:56 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:44:56 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [13/Jan/2026:17:44:57 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:44:57 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:44:57 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:44:57 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:44:58 +0100] "GET /jp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:44:58 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:44:58 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [13/Jan/2026:17:44:58 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:44:59 +0100] "GET /fonts/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:44:59 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:44:59 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:44:59 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:00 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:00 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:00 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:00 +0100] "GET /wp-content/ai1wm-backups/about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:01 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:01 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:01 +0100] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:01 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:02 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [13/Jan/2026:17:45:02 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:02 +0100] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:02 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:03 +0100] "GET /public/fonts/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:03 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:03 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:03 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:04 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:04 +0100] "GET /wp-includes/blocks/buttons/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [13/Jan/2026:17:45:04 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [13/Jan/2026:17:45:04 +0100] "GET /wp-includes/blocks/list-item/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:05 +0100] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:05 +0100] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:05 +0100] "GET /wp-includes/blocks/search/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.223.5 - - [13/Jan/2026:17:45:05 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.223.5 - - [13/Jan/2026:17:45:06 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.223.5 - - [13/Jan/2026:17:45:06 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:27 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [13/Jan/2026:18:28:28 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [13/Jan/2026:18:28:28 +0100] "GET /about.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [13/Jan/2026:18:28:29 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [13/Jan/2026:18:28:29 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [13/Jan/2026:18:28:29 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [13/Jan/2026:18:28:29 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.205 - - [13/Jan/2026:18:28:30 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [13/Jan/2026:18:28:30 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.205 - - [13/Jan/2026:18:28:30 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [13/Jan/2026:18:28:30 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.205 - - [13/Jan/2026:18:28:31 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:31 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:31 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:32 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:32 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:32 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:32 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:33 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:33 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:33 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:34 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:34 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:34 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:34 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:35 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:35 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:35 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:35 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:36 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:36 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:36 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:36 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:37 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:37 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:37 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:38 +0100] "GET /07.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:38 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:38 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:38 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:39 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:39 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:39 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:39 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:40 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:40 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:40 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:41 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:41 +0100] "GET /build.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:41 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:41 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:42 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:42 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:42 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [13/Jan/2026:18:28:42 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [13/Jan/2026:18:28:43 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:43 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:43 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [13/Jan/2026:18:28:44 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:44 +0100] "GET /form.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:44 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:44 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:45 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:45 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:45 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:45 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:46 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.169.227 - - [13/Jan/2026:18:28:46 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:46 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:47 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.169.227 - - [13/Jan/2026:18:28:47 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.169.227 - - [13/Jan/2026:18:28:47 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 104.23.223.111 - - [13/Jan/2026:18:51:57 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.64.192.20 - - [13/Jan/2026:18:52:46 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.70.35.121 - - [13/Jan/2026:21:13:47 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.70.35.121 - - [13/Jan/2026:21:13:47 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.70.35.121 - - [13/Jan/2026:21:13:47 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.70.35.121 - - [13/Jan/2026:21:13:47 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.70.35.121 - - [13/Jan/2026:21:13:48 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.70.35.121 - - [13/Jan/2026:21:13:48 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.70.35.121 - - [13/Jan/2026:21:13:48 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:46 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:47 +0100] "GET /13.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:20:48 +0100] "GET /222.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:49 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:49 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:20:50 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:20:50 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:51 +0100] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:20:52 +0100] "GET /ae.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:20:52 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:53 +0100] "GET /assets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:20:53 +0100] "GET /assets/images/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:20:54 +0100] "GET /assets/images/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:54 +0100] "GET /bak.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:20:55 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:55 +0100] "GET /cc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:56 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:56 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:57 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:20:58 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:58 +0100] "GET /doc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:59 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:20:59 +0100] "GET /elp.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:00 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:00 +0100] "GET /files.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:01 +0100] "GET /gecko.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:01 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:02 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:03 +0100] "GET /k.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:03 +0100] "GET /man.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:04 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:04 +0100] "GET /num.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.164 - - [13/Jan/2026:22:21:05 +0100] "GET /profile.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:05 +0100] "GET /public/vx.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:06 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:06 +0100] "GET /shell.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:07 +0100] "GET /t.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:08 +0100] "GET /themes.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:08 +0100] "GET /vx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:09 +0100] "GET /wa/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:09 +0100] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:10 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:10 +0100] "GET /wp-admin/class-db.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:11 +0100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:11 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:12 +0100] "GET /wp-admin/images/file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:12 +0100] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:13 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:14 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:14 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.164 - - [13/Jan/2026:22:21:15 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:15 +0100] "GET /wp-admin/product.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:16 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:16 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:17 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:17 +0100] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:18 +0100] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:18 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:19 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:20 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:20 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:21 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:21 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:22 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:22 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:23 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:23 +0100] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:24 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:25 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:25 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:26 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:26 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:27 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.178.164 - - [13/Jan/2026:22:21:27 +0100] "GET /www.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.178.164 - - [13/Jan/2026:22:21:28 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.178.164 - - [13/Jan/2026:22:21:28 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.10.40 - - [13/Jan/2026:22:27:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.94.118 - - [13/Jan/2026:22:39:00 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.93 - - [13/Jan/2026:22:39:02 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.93 - - [13/Jan/2026:22:39:02 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.93 - - [13/Jan/2026:22:39:03 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.69.94.93 - - [13/Jan/2026:22:39:03 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.93 - - [13/Jan/2026:22:39:04 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.93 - - [13/Jan/2026:22:39:05 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:05 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:06 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:06 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:07 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:08 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:08 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [13/Jan/2026:22:39:09 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:09 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:10 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [13/Jan/2026:22:39:11 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:11 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [13/Jan/2026:22:39:12 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:12 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:13 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:14 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [13/Jan/2026:22:39:14 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:15 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:15 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:16 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:16 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:17 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:18 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [13/Jan/2026:22:39:18 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:19 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:19 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:20 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:20 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:21 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:22 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:22 +0100] "GET /07.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:23 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:23 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:24 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:24 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:25 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:26 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:26 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:27 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:27 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:28 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [13/Jan/2026:22:39:29 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:29 +0100] "GET /build.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:30 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:30 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:31 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:31 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:32 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:33 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:33 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:34 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:34 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:35 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:35 +0100] "GET /form.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:36 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [13/Jan/2026:22:39:37 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:37 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:38 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.69.94.118 - - [13/Jan/2026:22:39:38 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:39 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [13/Jan/2026:22:39:40 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:40 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:41 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:41 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.69.94.118 - - [13/Jan/2026:22:39:42 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.69.94.118 - - [13/Jan/2026:22:39:42 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:50 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:16:51 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:16:51 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:51 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.121 - - [13/Jan/2026:23:16:52 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:52 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:16:52 +0100] "GET /bless.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:16:52 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:53 +0100] "GET /goods.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:53 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:53 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:54 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:54 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:54 +0100] "GET /php.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:54 +0100] "GET /403.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:55 +0100] "GET /jp.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:55 +0100] "GET /server.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:55 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:55 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:56 +0100] "GET /fonts/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:16:56 +0100] "GET /wp.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:56 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:56 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:57 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:16:57 +0100] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.121 - - [13/Jan/2026:23:16:57 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:57 +0100] "GET /wp-content/ai1wm-backups/about.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:16:58 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:58 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.121 - - [13/Jan/2026:23:16:58 +0100] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:58 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:59 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:59 +0100] "GET /wp-content/themes/twentythirteen/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:59 +0100] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:16:59 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:17:00 +0100] "GET /public/fonts/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.64.213.121 - - [13/Jan/2026:23:17:00 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:17:00 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:17:00 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:17:01 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:17:01 +0100] "GET /wp-includes/blocks/buttons/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:17:01 +0100] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:17:01 +0100] "GET /wp-includes/blocks/list-item/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:17:02 +0100] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:17:02 +0100] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:17:02 +0100] "GET /wp-includes/blocks/search/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:17:03 +0100] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.64.213.121 - - [13/Jan/2026:23:17:03 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.64.213.121 - - [13/Jan/2026:23:17:03 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.151.66 - - [13/Jan/2026:23:30:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 9; itel A27) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.143 Mobile Safari/537.36" 172.71.103.116 - - [14/Jan/2026:00:28:26 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.103.129 - - [14/Jan/2026:00:28:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.68.35.168 - - [14/Jan/2026:00:32:33 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.68.35.96 - - [14/Jan/2026:00:32:33 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.68.35.96 - - [14/Jan/2026:00:32:33 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.35.96 - - [14/Jan/2026:00:32:33 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.35.96 - - [14/Jan/2026:00:32:33 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.35.96 - - [14/Jan/2026:00:32:34 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.35.96 - - [14/Jan/2026:00:32:34 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.71.215.196 - - [14/Jan/2026:01:26:03 +0100] "GET /222.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 104.23.172.10 - - [14/Jan/2026:01:41:26 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.148.123 - - [14/Jan/2026:01:57:50 +0100] "GET /blender-soft-body-gravity.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:16 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [14/Jan/2026:02:42:16 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:17 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:17 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:17 +0100] "GET /default.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:18 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:18 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:18 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:19 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:19 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:19 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:20 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:20 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [14/Jan/2026:02:42:20 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:21 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:21 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:21 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:22 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:22 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:22 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:23 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:23 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:23 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:24 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:24 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:24 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:25 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:25 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:26 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:26 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:26 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:27 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:27 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:27 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:28 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:28 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:28 +0100] "GET /07.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:29 +0100] "GET /1.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:29 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:29 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:30 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:30 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:30 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:31 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:31 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:31 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:32 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:32 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:32 +0100] "GET /build.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [14/Jan/2026:02:42:33 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:33 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:33 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:34 +0100] "GET /css.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:34 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:34 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:35 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:35 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.68.210.206 - - [14/Jan/2026:02:42:35 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:36 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:36 +0100] "GET /form.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:36 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:37 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:37 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:37 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:38 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:38 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.68.210.206 - - [14/Jan/2026:02:42:38 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:39 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:39 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:39 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:40 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.68.210.206 - - [14/Jan/2026:02:42:40 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.113.111 - - [14/Jan/2026:02:50:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 104.23.172.10 - - [14/Jan/2026:02:50:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 104.23.223.110 - - [14/Jan/2026:03:12:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 162.158.48.241 - - [14/Jan/2026:03:13:39 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.22.1.198 - - [14/Jan/2026:04:18:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 104.23.245.206 - - [14/Jan/2026:04:18:12 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 162.158.235.25 - - [14/Jan/2026:04:18:20 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.69.17.39 - - [14/Jan/2026:04:37:36 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.222.106 - - [14/Jan/2026:04:43:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 104.22.24.143 - - [14/Jan/2026:04:48:45 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.69.70.87 - - [14/Jan/2026:04:48:45 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 162.158.186.4 - - [14/Jan/2026:05:05:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.21 (KHTML, like Gecko) Chrome/11.0.682.0 Safari/534.21" 172.69.17.38 - - [14/Jan/2026:07:04:24 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.233.55 - - [14/Jan/2026:07:47:32 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.13 - - [14/Jan/2026:07:47:33 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.13 - - [14/Jan/2026:07:47:33 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.13 - - [14/Jan/2026:07:47:34 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [14/Jan/2026:07:47:34 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [14/Jan/2026:07:47:34 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.13 - - [14/Jan/2026:07:47:34 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:35 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:35 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:35 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:35 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:36 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:36 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:36 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.55 - - [14/Jan/2026:07:47:37 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:37 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:37 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:38 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:38 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:38 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:38 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:39 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:39 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:39 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:39 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:40 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:40 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:40 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:41 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:41 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:41 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:41 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:42 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:42 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:42 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:43 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:43 +0100] "GET /07.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:43 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:43 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:44 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:44 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:44 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:44 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:45 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.55 - - [14/Jan/2026:07:47:45 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:45 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:46 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:46 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:46 +0100] "GET /build.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:46 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:47 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:47 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:47 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:48 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:48 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:48 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:48 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:49 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:49 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:49 +0100] "GET /form.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:49 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:50 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:50 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:50 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:50 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:51 +0100] "GET /new.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:51 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.70.233.55 - - [14/Jan/2026:07:47:51 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.70.233.55 - - [14/Jan/2026:07:47:52 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:52 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:52 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.70.233.55 - - [14/Jan/2026:07:47:52 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.226.190 - - [14/Jan/2026:07:50:06 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.70.92.157 - - [14/Jan/2026:07:50:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.92.157 - - [14/Jan/2026:07:50:08 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.70.92.157 - - [14/Jan/2026:07:50:08 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.70.92.157 - - [14/Jan/2026:07:50:09 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.70.92.157 - - [14/Jan/2026:07:50:09 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.70.92.157 - - [14/Jan/2026:07:50:10 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.70.92.157 - - [14/Jan/2026:07:50:10 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.70.92.157 - - [14/Jan/2026:07:50:11 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 172.70.92.157 - - [14/Jan/2026:07:50:11 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 172.70.92.157 - - [14/Jan/2026:07:50:11 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.42.75 - - [14/Jan/2026:08:34:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 162.158.41.22 - - [14/Jan/2026:08:34:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 104.23.221.12 - - [14/Jan/2026:08:41:34 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.10.41 - - [14/Jan/2026:08:41:56 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.70.100.151 - - [14/Jan/2026:09:29:48 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.64.213.120 - - [14/Jan/2026:11:40:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36" 104.22.1.198 - - [14/Jan/2026:12:38:18 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 108.162.246.118 - - [14/Jan/2026:13:31:06 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 108.162.241.107 - - [14/Jan/2026:13:31:18 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.120.7 - - [14/Jan/2026:13:31:18 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.69.150.137 - - [14/Jan/2026:14:04:07 +0100] "GET / HTTP/1.1" 301 162 "http://0-2173.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 172.69.7.183 - - [14/Jan/2026:14:08:09 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.134.167 - - [14/Jan/2026:14:46:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.158.167 - - [14/Jan/2026:15:39:46 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Java/1.8.0_332" 172.70.126.45 - - [14/Jan/2026:16:37:58 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.206.90 - - [14/Jan/2026:17:18:58 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.70.206.90 - - [14/Jan/2026:17:18:59 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.70.206.90 - - [14/Jan/2026:17:18:59 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.70.206.90 - - [14/Jan/2026:17:18:59 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.70.206.90 - - [14/Jan/2026:17:18:59 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.70.206.90 - - [14/Jan/2026:17:18:59 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.70.206.90 - - [14/Jan/2026:17:18:59 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:36 +0100] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.18 - - [14/Jan/2026:17:20:37 +0100] "GET /abcd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.98.18 - - [14/Jan/2026:17:20:38 +0100] "GET /about.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.18 - - [14/Jan/2026:17:20:38 +0100] "GET /chosen.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.18 - - [14/Jan/2026:17:20:38 +0100] "GET /default.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:39 +0100] "GET /ds.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:39 +0100] "GET /f5.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:40 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:40 +0100] "GET /bolt.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:40 +0100] "GET /file.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:41 +0100] "GET /god4m.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:41 +0100] "GET /info.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:42 +0100] "GET /modules/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:42 +0100] "GET /test1.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:42 +0100] "GET /uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:43 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:43 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:43 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:44 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:44 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:45 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:45 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:45 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:46 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.96 - - [14/Jan/2026:17:20:46 +0100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:47 +0100] "GET /.__info.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:47 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:48 +0100] "GET /manager.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:48 +0100] "GET /radio.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:48 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:49 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:49 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.96 - - [14/Jan/2026:17:20:49 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:50 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:50 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:51 +0100] "GET /0.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:51 +0100] "GET /07.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:51 +0100] "GET /1.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:52 +0100] "GET /123.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:52 +0100] "GET /aa.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:52 +0100] "GET /admin.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:53 +0100] "GET /akc.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:53 +0100] "GET /akcc.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:54 +0100] "GET /asasx.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:54 +0100] "GET /asd.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:54 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:55 +0100] "GET /axx.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:55 +0100] "GET /berax.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:55 +0100] "GET /build.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:56 +0100] "GET /buy.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:56 +0100] "GET /checkbox.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:57 +0100] "GET /cong.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:57 +0100] "GET /css.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:57 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:58 +0100] "GET /edit.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:58 +0100] "GET /file2.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:20:58 +0100] "GET /file4.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:59 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:20:59 +0100] "GET /flower.php HTTP/1.1" 301 162 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:21:00 +0100] "GET /form.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:21:00 +0100] "GET /kyami.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:21:00 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:21:01 +0100] "GET /mari.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:21:01 +0100] "GET /moon.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:21:01 +0100] "GET /nc4.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:21:02 +0100] "GET /new.php HTTP/1.1" 301 162 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:21:02 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.96 - - [14/Jan/2026:17:21:03 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:21:03 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:21:03 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.96 - - [14/Jan/2026:17:21:04 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.96 - - [14/Jan/2026:17:21:04 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.148.122 - - [14/Jan/2026:18:54:59 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.10.40 - - [14/Jan/2026:18:58:02 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 162.158.183.69 - - [14/Jan/2026:19:02:01 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 104.23.221.12 - - [14/Jan/2026:19:02:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 172.71.255.95 - - [14/Jan/2026:19:07:19 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.126.152 - - [14/Jan/2026:19:35:16 +0100] "GET /js/jquery.flexslider-min.js HTTP/1.1" 301 162 "-" "curl/8.7.1" 162.158.78.92 - - [14/Jan/2026:19:42:45 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:45 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:46 +0100] "GET /update/bibil.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:46 +0100] "GET /wp-conf.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:46 +0100] "GET /test/wop.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:46 +0100] "GET /update/wpupex.php/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:46 +0100] "GET /wp-miiss.php.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:46 +0100] "GET /per.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:47 +0100] "GET /uploads/upload.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:47 +0100] "GET /ioa.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:47 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:47 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:47 +0100] "GET /sww.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:47 +0100] "GET //h.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:48 +0100] "GET /tua.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:48 +0100] "GET /oga.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:48 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:48 +0100] "GET /wordpress/wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:48 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:48 +0100] "GET /mt/byp.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:49 +0100] "GET //test.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:49 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:49 +0100] "GET /wp-admin/acme.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:49 +0100] "GET /sow.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:49 +0100] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:49 +0100] "GET //simple.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:50 +0100] "GET /BIBIL.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:50 +0100] "GET /sde.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:50 +0100] "GET //wp-content/json.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:50 +0100] "GET /spip.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:50 +0100] "GET /zjggu.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:51 +0100] "GET /assets/js/wp-session.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:51 +0100] "GET //wp-admin/user/index.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:51 +0100] "GET /4ff11.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:51 +0100] "GET /wsrer.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:51 +0100] "GET /tro.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:51 +0100] "GET /zuk.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:52 +0100] "GET /sol.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:52 +0100] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:52 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:52 +0100] "GET /lok.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:52 +0100] "GET /msg.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:52 +0100] "GET /tra.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:53 +0100] "GET /wto.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:53 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:53 +0100] "GET /cms/niz.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:53 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:53 +0100] "GET /haf.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:53 +0100] "GET /.trash7309/f/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:54 +0100] "GET /abe.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:54 +0100] "GET /tts.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:54 +0100] "GET /sue.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:54 +0100] "GET /thoms.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:54 +0100] "GET /2b5f0.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:55 +0100] "GET //lock.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:55 +0100] "GET /wp-admin/fw.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:55 +0100] "GET /wp-includes/Ipv6.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:55 +0100] "GET //web.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:55 +0100] "GET /opss.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:55 +0100] "GET /images/fk2e3/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:56 +0100] "GET //x.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:56 +0100] "GET /nng.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:56 +0100] "GET /blo.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:56 +0100] "GET /WordPress/x/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:56 +0100] "GET /x/index.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:56 +0100] "GET /gul.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:57 +0100] "GET /ucpfr.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:57 +0100] "GET //wp-includes/css/about.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:57 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:57 +0100] "GET /images/g3.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:57 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:57 +0100] "GET /sty.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:58 +0100] "GET /Cachex.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:58 +0100] "GET //404.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:58 +0100] "GET /dds.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:58 +0100] "GET /ttw.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:58 +0100] "GET /ssk.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:59 +0100] "GET /wui.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:59 +0100] "GET /first/function.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:59 +0100] "GET /wwo.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:59 +0100] "GET /nhd.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:59 +0100] "GET /jju.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:42:59 +0100] "GET //wp-includes/js/tinymce/index.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:00 +0100] "GET /wp-includes/class-wp-dependency-get.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:00 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:00 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:00 +0100] "GET /wp-admin/zwso.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:00 +0100] "GET /wp-content/uploads/gravity_forms/d/d/d/g/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:00 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:01 +0100] "GET /ula.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:01 +0100] "GET /.trash7309/dd/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:01 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:01 +0100] "GET /wp/sih.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:01 +0100] "GET //wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:01 +0100] "GET /wp-content/del.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:02 +0100] "GET /niu.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:02 +0100] "GET /yee.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:02 +0100] "GET /1337.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:02 +0100] "GET /ink.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:02 +0100] "GET /scripts/wpup.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:03 +0100] "GET /term.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:03 +0100] "GET /opsqt.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:03 +0100] "GET /sog.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:03 +0100] "GET /wd/shh.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:03 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:03 +0100] "GET /myy.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:04 +0100] "GET //moon.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:04 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:04 +0100] "GET /index/data.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:04 +0100] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:04 +0100] "GET /cgi-bin/wle.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:04 +0100] "GET /yxijx.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:05 +0100] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:05 +0100] "GET /buv.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:05 +0100] "GET /hum.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:05 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:05 +0100] "GET /JPG.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:06 +0100] "GET /los.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:06 +0100] "GET /zugvi.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:06 +0100] "GET /bah.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:06 +0100] "GET /dlvqo.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:06 +0100] "GET //inputs.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:06 +0100] "GET /sst.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:07 +0100] "GET /author-template-less.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:07 +0100] "GET /sft.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:07 +0100] "GET /lddxs.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:07 +0100] "GET /sts.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:07 +0100] "GET /zwlsv.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:07 +0100] "GET /ty.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:08 +0100] "GET /kal.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:08 +0100] "GET //user.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:08 +0100] "GET /e/data.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:08 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:09 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:09 +0100] "GET //wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:09 +0100] "GET /suy.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:09 +0100] "GET //403.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:09 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:09 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:10 +0100] "GET /5ed04.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:10 +0100] "GET /wp-admin/user-new.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:10 +0100] "GET //about.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:10 +0100] "GET /apsarasarts/okk.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:10 +0100] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:10 +0100] "GET /backup/db.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:11 +0100] "GET /seni_budaya/admin/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:11 +0100] "GET //2.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:11 +0100] "GET //info.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:11 +0100] "GET //system.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:11 +0100] "GET //function/function.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:12 +0100] "GET //k.php HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:12 +0100] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "-" 162.158.78.92 - - [14/Jan/2026:19:43:12 +0100] "GET /uploxe.php HTTP/1.1" 301 162 "-" "-" 172.70.179.156 - - [14/Jan/2026:21:33:44 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.179.155 - - [14/Jan/2026:23:59:57 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.210.116 - - [15/Jan/2026:00:22:47 +0100] "GET /txets.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.208.108 - - [15/Jan/2026:01:02:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 162.158.171.5 - - [15/Jan/2026:01:02:46 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 162.158.210.116 - - [15/Jan/2026:01:33:39 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.126.44 - - [15/Jan/2026:02:13:07 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.159.120.251 - - [15/Jan/2026:02:45:14 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.23.177 - - [15/Jan/2026:02:49:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.215.195 - - [15/Jan/2026:04:15:58 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:00 +0100] "GET /dox.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:00 +0100] "GET /rrr.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:01 +0100] "GET /eee.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:01 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:02 +0100] "GET /bala.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:03 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:03 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:03 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:04 +0100] "GET /wsoyanzorng.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:04 +0100] "GET /alf.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:05 +0100] "GET /xmlrpc2.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:05 +0100] "GET /evil.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:06 +0100] "GET /demo.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:06 +0100] "GET /tmpshell.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:07 +0100] "GET /moto.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:07 +0100] "GET /columns.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:08 +0100] "GET /utchiha.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:09 +0100] "GET /utchiha_uploader.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:09 +0100] "GET /Deadcode1975.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:09 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:10 +0100] "GET /wp-22.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:10 +0100] "GET /1975.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:10 +0100] "GET /emergency.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:11 +0100] "GET /cp.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:11 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:12 +0100] "GET /rxr.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:12 +0100] "GET /F0x.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:13 +0100] "GET /images/F0x.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:13 +0100] "GET /payload.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:14 +0100] "GET /alfaindex.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:14 +0100] "GET /www.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:15 +0100] "GET /snd.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:15 +0100] "GET /lalala.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:16 +0100] "GET /me.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:17 +0100] "GET /0x55.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:17 +0100] "GET /xx.php/wp-cron.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:17 +0100] "GET //alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:18 +0100] "GET //sad/about.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:19 +0100] "GET //buy.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:19 +0100] "GET //doc.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:20 +0100] "GET //wp.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:20 +0100] "GET //lufix.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:21 +0100] "GET //elp.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:21 +0100] "GET //.cache/x.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:21 +0100] "GET //content.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:22 +0100] "GET //wso.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:23 +0100] "GET //h.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:23 +0100] "GET //simple.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:23 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:24 +0100] "GET //lock.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:24 +0100] "GET //x.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:24 +0100] "GET //404.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:25 +0100] "GET //moon.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:25 +0100] "GET //403.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:26 +0100] "GET //user.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:26 +0100] "GET /e/data.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:26 +0100] "GET //web.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:27 +0100] "GET /acwfihfh.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:27 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:27 +0100] "GET /ea.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:28 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:28 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:29 +0100] "GET /0x0x.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:29 +0100] "GET /nov.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:30 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:30 +0100] "GET /555.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:31 +0100] "GET /lanz.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:31 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:31 +0100] "GET /3406.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:32 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:32 +0100] "GET /cccc.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:32 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:33 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:33 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:34 +0100] "GET /ws28.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:34 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:34 +0100] "GET /000.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:35 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:35 +0100] "GET /avtst.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:35 +0100] "GET /file32.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:36 +0100] "GET /ws46.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:36 +0100] "GET /esp.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:37 +0100] "GET /cjfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:37 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:38 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:39 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:39 +0100] "GET /family.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:40 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:40 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:40 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:41 +0100] "GET /tons.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:41 +0100] "GET /444.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:41 +0100] "GET /nx1.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:42 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:42 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:43 +0100] "GET /ut.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:43 +0100] "GET /aaaa.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:44 +0100] "GET /vee.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:44 +0100] "GET /bras.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:45 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:45 +0100] "GET /hexx.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:45 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:46 +0100] "GET /out.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:46 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:47 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:47 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:47 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:52 +0100] "GET /21x.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:52 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:52 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:53 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:53 +0100] "GET /xeeex.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:54 +0100] "GET /wpup.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:54 +0100] "GET /hk.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:54 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:55 +0100] "GET /ws35.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:55 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:56 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:56 +0100] "GET /inde.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:57 +0100] "GET /ws43.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:57 +0100] "GET /ws34.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:58 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:59 +0100] "GET /031.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:59 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:16:59 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:00 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:00 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:00 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:01 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:02 +0100] "GET /die.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:03 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:03 +0100] "GET /f8.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:04 +0100] "GET /963e.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:04 +0100] "GET /gi.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:05 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:05 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:06 +0100] "GET /ths.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:06 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:07 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:07 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:08 +0100] "GET /0o0.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:08 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:09 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:09 +0100] "GET /bbbb.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:10 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:10 +0100] "GET /an8.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:10 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:11 +0100] "GET /f2f.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:11 +0100] "GET /anskrit.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:12 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:12 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:13 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:13 +0100] "GET /alpa.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:13 +0100] "GET /lisa.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:14 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:14 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:15 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:15 +0100] "GET /lx.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:16 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:17 +0100] "GET /ws36.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:17 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:18 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:18 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:19 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:20 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:21 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:21 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:22 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:22 +0100] "GET /file3.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:23 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:24 +0100] "GET /rh.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:24 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:25 +0100] "GET /file13.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:25 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:26 +0100] "GET /akk.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:26 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:26 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:27 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:27 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:28 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:28 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:28 +0100] "GET /rrr.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:29 +0100] "GET /asf.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:29 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:29 +0100] "GET /filesss.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:30 +0100] "GET /wsheet1.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:30 +0100] "GET /oo.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:31 +0100] "GET /classgoto24.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:31 +0100] "GET /win.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:32 +0100] "GET /1100.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:33 +0100] "GET /shell1.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:33 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:34 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:34 +0100] "GET /flower2.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:34 +0100] "GET /ooaiyc.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:35 +0100] "GET /bless14.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:35 +0100] "GET /87.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:36 +0100] "GET /xo.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:36 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:36 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 172.71.215.195 - - [15/Jan/2026:04:17:37 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.69.7.183 - - [15/Jan/2026:04:28:40 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.160.10 - - [15/Jan/2026:05:55:30 +0100] "GET /about.php?action=p&api=p&path=p&token= HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.58.146 - - [15/Jan/2026:06:55:31 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.217.47 - - [15/Jan/2026:08:16:27 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.182.192 - - [15/Jan/2026:08:18:23 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.70.179.156 - - [15/Jan/2026:09:22:41 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.6.151 - - [15/Jan/2026:10:20:46 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:46 +0100] "GET /blue.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:47 +0100] "GET /fang.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:47 +0100] "GET /an7.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:47 +0100] "GET /f7.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:48 +0100] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:48 +0100] "GET //function/function.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:48 +0100] "GET //cgi-bin/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:49 +0100] "GET //admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:49 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:49 +0100] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:50 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:50 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:50 +0100] "GET /x/ HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:51 +0100] "GET /ss1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:51 +0100] "GET //assets/css/index.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:52 +0100] "GET //goods.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:52 +0100] "GET //admin.php?fm=true HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:52 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:53 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:53 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:53 +0100] "GET //adminfuns.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:54 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:54 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:54 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:55 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:55 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:55 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:56 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:56 +0100] "GET /f5.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:56 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:57 +0100] "GET /xtride.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:57 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:57 +0100] "GET /flower2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:58 +0100] "GET //f6.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:58 +0100] "GET //edit.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:58 +0100] "GET //aa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:59 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:59 +0100] "GET //wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:20:59 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:00 +0100] "GET //av.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:00 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:00 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:01 +0100] "GET /sadd5.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:01 +0100] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:01 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:02 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:02 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:02 +0100] "GET /ot.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:03 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:03 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:03 +0100] "GET /inputs.php? HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:04 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:04 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:04 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:05 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:05 +0100] "GET //class.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:05 +0100] "GET /wp-admin/css/colors/midnight/about.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:06 +0100] "GET /gec.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:06 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:06 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:07 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:07 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:07 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:08 +0100] "GET //lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:08 +0100] "GET //lv.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:08 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:09 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:09 +0100] "GET //galex.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:09 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:10 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:10 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:10 +0100] "GET /bipas.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:11 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:11 +0100] "GET /shoyo.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:11 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:12 +0100] "GET /wp-l0gin.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:12 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:12 +0100] "GET /blurbs18.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:13 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:13 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:13 +0100] "GET /bless14.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:14 +0100] "GET /ws13.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:14 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:14 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:15 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:15 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:15 +0100] "GET /Contrller.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:16 +0100] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:16 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:16 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:17 +0100] "GET //web.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:17 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:17 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:18 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:18 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:18 +0100] "GET /xsec1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:19 +0100] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:19 +0100] "GET /lx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:19 +0100] "GET /fw.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:20 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:20 +0100] "GET /X7x.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:20 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:21 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:21 +0100] "GET //wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:21 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:22 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:22 +0100] "GET /qqq.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:22 +0100] "GET /xvent.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:23 +0100] "GET /wp-aaa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:23 +0100] "GET /ut.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:23 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:24 +0100] "GET /wp-content/themes/too.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:24 +0100] "GET /0o0.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:25 +0100] "GET /efile.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:25 +0100] "GET /mg.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:25 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:26 +0100] "GET /plss3.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:26 +0100] "GET /about3.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:26 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:27 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:27 +0100] "GET ///admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:27 +0100] "GET /usep.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:28 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:28 +0100] "GET /cccc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:28 +0100] "GET /locale.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:29 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:29 +0100] "GET /bp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:29 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:30 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:30 +0100] "GET /wpc.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:30 +0100] "GET /yellow.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:31 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:31 +0100] "GET /thh.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:31 +0100] "GET /inde.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:32 +0100] "GET /gv.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:32 +0100] "GET /admins.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:32 +0100] "GET /.wp-db.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:33 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:33 +0100] "GET //wp-content/wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:33 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:34 +0100] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:34 +0100] "GET /main.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:34 +0100] "GET /a1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:35 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:35 +0100] "GET /dfre.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:35 +0100] "GET /class.1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:36 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:36 +0100] "GET /clawwww.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:36 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:37 +0100] "GET /acacia.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:37 +0100] "GET /aa2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [15/Jan/2026:10:21:38 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.70.94.173 - - [15/Jan/2026:10:55:05 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.208.109 - - [15/Jan/2026:11:32:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.110 - - [15/Jan/2026:11:32:31 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.175.110 - - [15/Jan/2026:11:32:31 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 104.23.175.110 - - [15/Jan/2026:11:32:32 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.110 - - [15/Jan/2026:11:32:32 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 104.23.175.110 - - [15/Jan/2026:11:32:33 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 104.23.175.110 - - [15/Jan/2026:11:32:33 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 104.23.175.110 - - [15/Jan/2026:11:32:34 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 104.23.175.110 - - [15/Jan/2026:11:32:34 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 104.23.175.110 - - [15/Jan/2026:11:32:34 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.110 - - [15/Jan/2026:11:32:35 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.71.148.157 - - [15/Jan/2026:11:45:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.240.100 - - [15/Jan/2026:11:45:59 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://www.immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.126.45 - - [15/Jan/2026:11:49:20 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.232.155 - - [15/Jan/2026:13:33:29 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.232.155 - - [15/Jan/2026:13:33:31 +0100] "GET /.env.prod.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.134.36 - - [15/Jan/2026:13:33:31 +0100] "GET /index.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.126.61 - - [15/Jan/2026:13:33:31 +0100] "GET /test/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.130.205 - - [15/Jan/2026:13:33:31 +0100] "GET /config.json.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.133 - - [15/Jan/2026:13:33:31 +0100] "GET /env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.132 - - [15/Jan/2026:13:33:31 +0100] "GET /actuator/configprops HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.133 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/index HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.126.61 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/refs/heads/master HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.130.204 - - [15/Jan/2026:13:33:31 +0100] "GET /credentials.json.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.68.151.157 - - [15/Jan/2026:13:33:31 +0100] "GET /manage/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.229.135 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/logs/HEAD HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.229.135 - - [15/Jan/2026:13:33:31 +0100] "GET /config/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.68.151.156 - - [15/Jan/2026:13:33:31 +0100] "GET /settings.json.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.130.204 - - [15/Jan/2026:13:33:31 +0100] "GET /test/phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.225.149 - - [15/Jan/2026:13:33:31 +0100] "GET /.git-credentials HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.126.61 - - [15/Jan/2026:13:33:31 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.132 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/info/exclude HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.133 - - [15/Jan/2026:13:33:31 +0100] "GET /.env.staging.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.130.204 - - [15/Jan/2026:13:33:31 +0100] "GET /secrets.json.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.229.134 - - [15/Jan/2026:13:33:31 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.130.204 - - [15/Jan/2026:13:33:31 +0100] "GET /secrets.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.68.151.156 - - [15/Jan/2026:13:33:31 +0100] "GET /sites/default/settings.php.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.130.205 - - [15/Jan/2026:13:33:31 +0100] "GET /api/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.229.135 - - [15/Jan/2026:13:33:31 +0100] "GET /info.php.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.225.148 - - [15/Jan/2026:13:33:31 +0100] "GET /config.php.old HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.68.151.157 - - [15/Jan/2026:13:33:31 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.232.155 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/packed-refs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.229.135 - - [15/Jan/2026:13:33:31 +0100] "GET /application.yml.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.76 - - [15/Jan/2026:13:33:31 +0100] "GET /actuator/env.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.76 - - [15/Jan/2026:13:33:31 +0100] "GET /.aws/credentials HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.77 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/description HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.77 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/logs/refs/heads/master HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.77 - - [15/Jan/2026:13:33:31 +0100] "GET /.gitconfig HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.77 - - [15/Jan/2026:13:33:31 +0100] "GET /index.php?debug=phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.132 - - [15/Jan/2026:13:33:31 +0100] "GET /management/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.135.15 - - [15/Jan/2026:13:33:31 +0100] "GET /appsettings.json.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.130.205 - - [15/Jan/2026:13:33:31 +0100] "GET /actuator/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.135.15 - - [15/Jan/2026:13:33:31 +0100] "GET /.ENV HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.135.16 - - [15/Jan/2026:13:33:31 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.135.16 - - [15/Jan/2026:13:33:31 +0100] "GET /swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.133 - - [15/Jan/2026:13:33:31 +0100] "GET /credentials.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.68.151.156 - - [15/Jan/2026:13:33:31 +0100] "GET /configuration.php.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.77 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/objects/info/packs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.68.234 - - [15/Jan/2026:13:33:31 +0100] "GET /.env.deploy HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.123.166 - - [15/Jan/2026:13:33:31 +0100] "GET /phpinfo.php.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.68.235 - - [15/Jan/2026:13:33:31 +0100] "GET /administrator/index.php?view=phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.123.166 - - [15/Jan/2026:13:33:31 +0100] "GET /.env.development.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.123.166 - - [15/Jan/2026:13:33:31 +0100] "GET /public/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.225.148 - - [15/Jan/2026:13:33:31 +0100] "GET /.env?show=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.123.165 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/COMMIT_EDITMSG HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.77 - - [15/Jan/2026:13:33:31 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.123.165 - - [15/Jan/2026:13:33:31 +0100] "GET /.env.production.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.68.234 - - [15/Jan/2026:13:33:31 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.68.234 - - [15/Jan/2026:13:33:31 +0100] "GET /config/secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.76 - - [15/Jan/2026:13:33:31 +0100] "GET /env.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.76 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/refs/heads/main HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.77 - - [15/Jan/2026:13:33:31 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.132 - - [15/Jan/2026:13:33:31 +0100] "GET /.git/logs/refs/heads/main HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.126.60 - - [15/Jan/2026:13:33:32 +0100] "GET /.gitignore HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.123.165 - - [15/Jan/2026:13:33:32 +0100] "GET /test.php.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.76 - - [15/Jan/2026:13:33:32 +0100] "GET /.env.local.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.122.94 - - [15/Jan/2026:13:33:32 +0100] "GET /main.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.119.64 - - [15/Jan/2026:13:33:32 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.119.64 - - [15/Jan/2026:13:33:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.251.194 - - [15/Jan/2026:13:57:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.100.152 - - [15/Jan/2026:14:12:36 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.88.110 - - [15/Jan/2026:15:30:27 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.70.188.88 - - [15/Jan/2026:15:30:43 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.71.146.74 - - [15/Jan/2026:15:37:58 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.41.23 - - [15/Jan/2026:15:42:33 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.23.209.47 - - [15/Jan/2026:16:02:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 172.69.17.39 - - [15/Jan/2026:16:32:30 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.58.147 - - [15/Jan/2026:18:35:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.182.193 - - [15/Jan/2026:18:42:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 172.71.134.113 - - [15/Jan/2026:19:41:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.127.137 - - [15/Jan/2026:19:41:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.58.147 - - [15/Jan/2026:19:54:28 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.248.61 - - [15/Jan/2026:20:36:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 104.23.175.157 - - [15/Jan/2026:22:21:52 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.69.7.184 - - [15/Jan/2026:22:25:32 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.221.13 - - [15/Jan/2026:22:48:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.213.195 - - [15/Jan/2026:23:00:02 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 104.23.213.195 - - [15/Jan/2026:23:00:02 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 104.23.213.195 - - [15/Jan/2026:23:00:02 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 104.23.213.195 - - [15/Jan/2026:23:00:03 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 104.23.213.195 - - [15/Jan/2026:23:00:03 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 104.23.213.195 - - [15/Jan/2026:23:00:03 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 104.23.213.195 - - [15/Jan/2026:23:00:03 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:14 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 162.158.94.116 - - [15/Jan/2026:23:03:16 +0100] "GET /login.php?v=Login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 162.158.94.116 - - [15/Jan/2026:23:03:16 +0100] "GET /login.php?v=Register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 162.158.94.116 - - [15/Jan/2026:23:03:17 +0100] "GET /Search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36" 162.158.94.116 - - [15/Jan/2026:23:03:17 +0100] "GET /Search.php?luks=true HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.116 - - [15/Jan/2026:23:03:18 +0100] "GET /details.php?post_id=7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 172.70.248.102 - - [15/Jan/2026:23:03:19 +0100] "GET /js/main.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 162.158.94.22 - - [15/Jan/2026:23:03:20 +0100] "GET /Search.php?searchbar-type=Me+Qera HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 162.158.94.22 - - [15/Jan/2026:23:03:21 +0100] "GET /details.php?post_id=6 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 162.158.94.22 - - [15/Jan/2026:23:03:21 +0100] "GET /details.php?post_id=4 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:22 +0100] "GET /details.php?post_id=2 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:22 +0100] "GET /RrethNesh.php?post_id=5678 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 172.71.246.3 - - [15/Jan/2026:23:03:23 +0100] "GET /js/jquery.flexslider-min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 162.158.94.22 - - [15/Jan/2026:23:03:24 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:25 +0100] "GET /details.php?post_id=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 162.158.94.22 - - [15/Jan/2026:23:03:25 +0100] "GET /RrethNesh.php?post_id=2345 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:26 +0100] "GET /Search.php?tipi=Projekt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 162.158.94.22 - - [15/Jan/2026:23:03:26 +0100] "GET /details.php?post_id=9 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 162.158.94.22 - - [15/Jan/2026:23:03:27 +0100] "GET /details.php?post_id=8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:28 +0100] "GET /details.php?post_id=3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 172.71.164.47 - - [15/Jan/2026:23:03:28 +0100] "GET /js/modernizr.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:30 +0100] "GET /Kontakt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 162.158.94.22 - - [15/Jan/2026:23:03:30 +0100] "GET /Search.php?searchbar-type=Ne+Shitje HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:31 +0100] "GET /RrethNesh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:31 +0100] "GET /Search.php?okazion=true HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 162.158.94.22 - - [15/Jan/2026:23:03:32 +0100] "GET /RrethNesh.php?post_id=1234 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:33 +0100] "GET /RrethNesh.php?post_id=3456 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:33 +0100] "GET /RrethNesh.php?post_id=4567 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:34 +0100] "GET /Search.php?searchbar-type=Toke HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.94.22 - - [15/Jan/2026:23:03:35 +0100] "GET /details.php?post_id=5 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 162.158.243.27 - - [15/Jan/2026:23:07:47 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.69.17.38 - - [15/Jan/2026:23:46:12 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.184.207 - - [16/Jan/2026:00:29:38 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.71.184.207 - - [16/Jan/2026:00:29:52 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.69.58.147 - - [16/Jan/2026:01:08:38 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.109.95 - - [16/Jan/2026:01:40:24 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.160.99 - - [16/Jan/2026:01:40:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.109.116 - - [16/Jan/2026:01:55:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.70.220.31 - - [16/Jan/2026:01:55:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.58.147 - - [16/Jan/2026:02:27:59 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.42.178 - - [16/Jan/2026:03:01:15 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 172.70.126.45 - - [16/Jan/2026:03:43:47 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.248.61 - - [16/Jan/2026:04:00:15 +0100] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" 172.70.179.156 - - [16/Jan/2026:05:16:16 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.207.144 - - [16/Jan/2026:06:11:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.255.95 - - [16/Jan/2026:06:36:28 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.68.211.12 - - [16/Jan/2026:07:17:09 +0100] "GET / HTTP/1.1" 301 162 "-" "python-requests/2.32.5" 172.70.100.152 - - [16/Jan/2026:07:50:54 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.166.72 - - [16/Jan/2026:07:55:06 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.71.103.106 - - [16/Jan/2026:08:15:18 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.69.58.147 - - [16/Jan/2026:09:04:01 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.238.247 - - [16/Jan/2026:09:36:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.255.95 - - [16/Jan/2026:10:21:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.103.56 - - [16/Jan/2026:11:36:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.95.130 - - [16/Jan/2026:11:36:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.179.156 - - [16/Jan/2026:11:39:12 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.182.192 - - [16/Jan/2026:11:55:19 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.70.100.151 - - [16/Jan/2026:12:06:40 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:45 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:45 +0100] "GET /wp-content/themes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:45 +0100] "GET /wp-admin/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:46 +0100] "GET /wp-includes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:46 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:46 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:46 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:47 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:47 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:47 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:47 +0100] "GET /blurbs.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:48 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:48 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:48 +0100] "GET /shelp.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:48 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:48 +0100] "GET /dex.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:49 +0100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:49 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:49 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:49 +0100] "GET /wp-admin/zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:50 +0100] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:50 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:50 +0100] "GET /shlo.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:50 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:51 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:51 +0100] "GET /php8.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:51 +0100] "GET /lufix1.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:51 +0100] "GET /witmm.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:52 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:52 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:52 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:52 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:53 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:53 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:53 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:53 +0100] "GET /txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:54 +0100] "GET /wp-content/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:54 +0100] "GET /wp-admin/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:54 +0100] "GET /postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:54 +0100] "GET /wp-content/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [16/Jan/2026:12:06:55 +0100] "GET /wp-admin/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.7.183 - - [16/Jan/2026:12:57:18 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.146.74 - - [16/Jan/2026:13:57:34 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.41.22 - - [16/Jan/2026:13:57:34 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.255.95 - - [16/Jan/2026:14:12:06 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.22.24.97 - - [16/Jan/2026:14:36:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 104.22.20.235 - - [16/Jan/2026:15:07:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.167.130 - - [16/Jan/2026:15:07:25 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.179.156 - - [16/Jan/2026:15:29:05 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.109.54 - - [16/Jan/2026:15:54:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 172.71.255.95 - - [16/Jan/2026:16:49:02 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.126.44 - - [16/Jan/2026:18:09:30 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.7.183 - - [16/Jan/2026:19:11:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.70.100.152 - - [16/Jan/2026:19:29:21 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.68.245.187 - - [16/Jan/2026:20:11:05 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.68.245.187 - - [16/Jan/2026:20:11:05 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.245.187 - - [16/Jan/2026:20:11:06 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.68.245.187 - - [16/Jan/2026:20:11:06 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.245.187 - - [16/Jan/2026:20:11:06 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.68.245.187 - - [16/Jan/2026:20:11:06 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.245.187 - - [16/Jan/2026:20:11:06 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.69.17.38 - - [16/Jan/2026:20:48:51 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.64.217.20 - - [16/Jan/2026:21:07:55 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 162.158.91.106 - - [16/Jan/2026:21:13:44 +0100] "GET /.well-known/acme-challenge/LVpToVjEOZS-oelWs9ayMv7NIYGCAlNtYkjGKzawr1g HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.68.174.185 - - [16/Jan/2026:21:13:44 +0100] "GET /.well-known/acme-challenge/LVpToVjEOZS-oelWs9ayMv7NIYGCAlNtYkjGKzawr1g HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 162.158.182.193 - - [16/Jan/2026:21:13:44 +0100] "GET /.well-known/acme-challenge/LVpToVjEOZS-oelWs9ayMv7NIYGCAlNtYkjGKzawr1g HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.69.58.147 - - [16/Jan/2026:21:13:45 +0100] "GET /.well-known/acme-challenge/LVpToVjEOZS-oelWs9ayMv7NIYGCAlNtYkjGKzawr1g HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.69.176.91 - - [16/Jan/2026:21:13:45 +0100] "GET /.well-known/acme-challenge/LVpToVjEOZS-oelWs9ayMv7NIYGCAlNtYkjGKzawr1g HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.70.214.79 - - [16/Jan/2026:21:13:49 +0100] "GET /.well-known/acme-challenge/yHPNDjRBA30bjU1Aw_TUKT7pmodGc877S5WsDBOBkH4 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.68.174.184 - - [16/Jan/2026:21:13:49 +0100] "GET /.well-known/acme-challenge/yHPNDjRBA30bjU1Aw_TUKT7pmodGc877S5WsDBOBkH4 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 108.162.216.126 - - [16/Jan/2026:21:13:49 +0100] "GET /.well-known/acme-challenge/yHPNDjRBA30bjU1Aw_TUKT7pmodGc877S5WsDBOBkH4 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.221.159 - - [16/Jan/2026:21:13:49 +0100] "GET /.well-known/acme-challenge/yHPNDjRBA30bjU1Aw_TUKT7pmodGc877S5WsDBOBkH4 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.70.142.145 - - [16/Jan/2026:21:13:50 +0100] "GET /.well-known/acme-challenge/yHPNDjRBA30bjU1Aw_TUKT7pmodGc877S5WsDBOBkH4 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.69.58.147 - - [16/Jan/2026:22:08:07 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.59.227 - - [16/Jan/2026:22:08:17 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.69.59.227 - - [16/Jan/2026:22:08:17 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.69.59.227 - - [16/Jan/2026:22:08:17 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.69.59.227 - - [16/Jan/2026:22:08:17 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.69.59.227 - - [16/Jan/2026:22:08:18 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.69.59.227 - - [16/Jan/2026:22:08:18 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.69.59.227 - - [16/Jan/2026:22:08:18 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.71.184.206 - - [16/Jan/2026:22:38:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.10.41 - - [16/Jan/2026:22:44:00 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.69.50.158 - - [16/Jan/2026:22:46:45 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.70.100.151 - - [16/Jan/2026:23:21:28 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.126.45 - - [17/Jan/2026:00:25:14 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.158.166 - - [17/Jan/2026:00:35:05 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.190.193 - - [17/Jan/2026:00:35:05 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 141.101.99.79 - - [17/Jan/2026:00:35:06 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.69.94.118 - - [17/Jan/2026:00:35:06 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.190.193 - - [17/Jan/2026:00:35:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.68.229.14 - - [17/Jan/2026:00:35:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.63933643a353138363a3a343330333a303037343a363036323; +https://leakix.net)" 172.69.178.164 - - [17/Jan/2026:00:35:08 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.13434336a333433616a3a303330333a303037343a363036323; +https://leakix.net)" 162.158.154.139 - - [17/Jan/2026:00:35:08 +0100] "POST /graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.253.108 - - [17/Jan/2026:00:35:08 +0100] "POST /graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.158.166 - - [17/Jan/2026:00:35:08 +0100] "POST /api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.154.139 - - [17/Jan/2026:00:35:08 +0100] "POST /api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:08 +0100] "POST /api/graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.111.162 - - [17/Jan/2026:00:35:08 +0100] "POST /api/graphql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.111.162 - - [17/Jan/2026:00:35:08 +0100] "POST /graphql/api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:08 +0100] "POST /graphql/api HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:08 +0100] "POST /api/gql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:08 +0100] "POST /api/gql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:10 +0100] "GET /swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:10 +0100] "GET /swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:11 +0100] "GET /swagger/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:11 +0100] "GET /swagger/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:12 +0100] "GET /swagger/swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.190.193 - - [17/Jan/2026:00:35:12 +0100] "GET /swagger/swagger-ui.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.111.162 - - [17/Jan/2026:00:35:13 +0100] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.190.193 - - [17/Jan/2026:00:35:13 +0100] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:14 +0100] "GET /swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:14 +0100] "GET /swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:15 +0100] "GET /swagger/v1/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:15 +0100] "GET /swagger/v1/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:16 +0100] "GET /v2/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:16 +0100] "GET /v2/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:17 +0100] "GET /v3/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:17 +0100] "GET /v3/api-docs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:18 +0100] "GET /api-docs/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.158.166 - - [17/Jan/2026:00:35:18 +0100] "GET /api-docs/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.253.108 - - [17/Jan/2026:00:35:19 +0100] "GET /api/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:19 +0100] "GET /api/swagger.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.158.166 - - [17/Jan/2026:00:35:20 +0100] "GET /@vite/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:20 +0100] "GET /@vite/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:21 +0100] "GET /actuator/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:21 +0100] "GET /actuator/env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.111.162 - - [17/Jan/2026:00:35:22 +0100] "GET /server HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:22 +0100] "GET /server HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.158.166 - - [17/Jan/2026:00:35:23 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.114.5 - - [17/Jan/2026:00:35:23 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.158.166 - - [17/Jan/2026:00:35:25 +0100] "GET /about HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.190.193 - - [17/Jan/2026:00:35:25 +0100] "GET /about HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.190.193 - - [17/Jan/2026:00:35:26 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:26 +0100] "GET /debug/default/view?panel=config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:27 +0100] "GET /v2/_catalog HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.114.5 - - [17/Jan/2026:00:35:27 +0100] "GET /v2/_catalog HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:28 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:28 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.253.108 - - [17/Jan/2026:00:35:29 +0100] "GET /server-status HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:29 +0100] "GET /server-status HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.111.162 - - [17/Jan/2026:00:35:30 +0100] "GET /login.action HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.111.162 - - [17/Jan/2026:00:35:30 +0100] "GET /login.action HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.190.193 - - [17/Jan/2026:00:35:31 +0100] "GET /_all_dbs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.154.139 - - [17/Jan/2026:00:35:31 +0100] "GET /_all_dbs HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.190.193 - - [17/Jan/2026:00:35:32 +0100] "GET /.DS_Store HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.158.166 - - [17/Jan/2026:00:35:32 +0100] "GET /.DS_Store HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.114.5 - - [17/Jan/2026:00:35:33 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:33 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.154.139 - - [17/Jan/2026:00:35:35 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 104.23.187.227 - - [17/Jan/2026:00:35:35 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:36 +0100] "GET /s/035313e26373e21323e2430313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:36 +0100] "GET /s/5363e2639313e27363e2237313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:37 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:37 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:38 +0100] "GET /telescope/requests HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:38 +0100] "GET /telescope/requests HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.230.231 - - [17/Jan/2026:00:35:39 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 162.158.63.76 - - [17/Jan/2026:00:35:39 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.70.114.5 - - [17/Jan/2026:00:35:40 +0100] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.5363e2639313e27363e2237313; +https://leakix.net)" 104.23.253.108 - - [17/Jan/2026:00:35:40 +0100] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.035313e26373e21323e2430313; +https://leakix.net)" 172.71.191.73 - - [17/Jan/2026:00:58:00 +0100] "GET / HTTP/1.1" 301 162 "-" "axios/1.13.2" 104.23.211.195 - - [17/Jan/2026:00:58:03 +0100] "GET / HTTP/1.1" 301 162 "-" "axios/1.13.2" 172.70.126.45 - - [17/Jan/2026:01:31:55 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.68.10.40 - - [17/Jan/2026:02:44:22 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.184.207 - - [17/Jan/2026:02:45:56 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.69.17.38 - - [17/Jan/2026:02:50:46 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.42.178 - - [17/Jan/2026:03:25:35 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 172.69.7.183 - - [17/Jan/2026:04:09:58 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.59.227 - - [17/Jan/2026:04:14:56 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.69.94.66 - - [17/Jan/2026:04:17:19 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.71.232.154 - - [17/Jan/2026:04:27:54 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.126.45 - - [17/Jan/2026:05:28:59 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.124.48 - - [17/Jan/2026:06:05:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.124.35 - - [17/Jan/2026:06:06:02 +0100] "GET /wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12) Chrome/111.0 Mobile Safari/537.36" 104.23.221.12 - - [17/Jan/2026:06:41:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 172.70.100.151 - - [17/Jan/2026:06:47:55 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.126.44 - - [17/Jan/2026:08:07:07 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.100.151 - - [17/Jan/2026:11:03:13 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.172.20 - - [17/Jan/2026:12:00:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 104.22.1.199 - - [17/Jan/2026:12:14:14 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.69.7.184 - - [17/Jan/2026:12:22:02 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.179.155 - - [17/Jan/2026:13:41:31 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.232.81 - - [17/Jan/2026:14:43:30 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 141.101.97.77 - - [17/Jan/2026:14:43:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.7.183 - - [17/Jan/2026:14:51:03 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.221.13 - - [17/Jan/2026:15:04:11 +0100] "GET /phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.197 - - [17/Jan/2026:15:04:12 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.197 - - [17/Jan/2026:15:04:14 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.197 - - [17/Jan/2026:15:04:16 +0100] "GET /_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.197 - - [17/Jan/2026:15:04:16 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.197 - - [17/Jan/2026:15:04:18 +0100] "GET /php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.197 - - [17/Jan/2026:15:04:18 +0100] "GET /php_info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.197 - - [17/Jan/2026:15:04:19 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:20 +0100] "GET /pi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:22 +0100] "GET /config.phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:24 +0100] "GET /admin/phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:26 +0100] "GET /.aws/credentials HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:28 +0100] "GET /pinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:29 +0100] "GET /phpinfo2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:29 +0100] "GET /php_version.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:31 +0100] "GET /version.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:31 +0100] "GET /server-info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:31 +0100] "GET /env.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.23.221.13 - - [17/Jan/2026:15:04:32 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.69.7.184 - - [17/Jan/2026:15:45:51 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 198.41.227.176 - - [17/Jan/2026:16:15:15 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.255.96 - - [17/Jan/2026:17:03:53 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.17.38 - - [17/Jan/2026:18:24:42 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.221.13 - - [17/Jan/2026:19:38:03 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.221.13 - - [17/Jan/2026:19:38:13 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.69.58.147 - - [17/Jan/2026:19:45:20 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.47.95 - - [17/Jan/2026:20:37:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.126.45 - - [17/Jan/2026:21:05:46 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.79.164 - - [17/Jan/2026:21:11:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 172.69.58.146 - - [17/Jan/2026:22:26:18 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.68.10.41 - - [17/Jan/2026:22:29:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.255.96 - - [17/Jan/2026:23:43:17 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.221.12 - - [18/Jan/2026:00:11:44 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.223.111 - - [18/Jan/2026:00:14:29 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.70.211.120 - - [18/Jan/2026:00:46:35 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.166.72 - - [18/Jan/2026:00:48:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.183.102 - - [18/Jan/2026:00:48:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.70.131.169 - - [18/Jan/2026:01:03:08 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.221.12 - - [18/Jan/2026:01:21:15 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 172.69.58.146 - - [18/Jan/2026:02:23:05 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.103.105 - - [18/Jan/2026:03:06:31 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.126.45 - - [18/Jan/2026:03:43:12 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.175.156 - - [18/Jan/2026:03:54:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.71.119.63 - - [18/Jan/2026:04:08:44 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.131.170 - - [18/Jan/2026:04:57:22 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.211.120 - - [18/Jan/2026:05:03:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.17.39 - - [18/Jan/2026:06:13:08 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.158.114 - - [18/Jan/2026:06:52:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.69.7.183 - - [18/Jan/2026:07:26:07 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.87.61 - - [18/Jan/2026:07:51:16 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 104.23.166.73 - - [18/Jan/2026:07:59:01 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.71.255.96 - - [18/Jan/2026:08:45:41 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.255.95 - - [18/Jan/2026:10:04:34 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.49.200 - - [18/Jan/2026:10:33:24 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.235 - - [18/Jan/2026:10:33:25 +0100] "GET /lisa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:26 +0100] "GET /000.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:26 +0100] "GET /abt.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:26 +0100] "GET /xxx.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:27 +0100] "GET /wfile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:27 +0100] "GET /alex.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:27 +0100] "GET /ctex1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:28 +0100] "GET /t1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:28 +0100] "GET /xc.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:28 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:29 +0100] "GET /an7.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:29 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:30 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:30 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:30 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:31 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:31 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:31 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:31 +0100] "GET /bless14.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:32 +0100] "GET /ws35.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:32 +0100] "GET /87.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:33 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:33 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:33 +0100] "GET /acwfihfh.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:33 +0100] "GET /f8.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:34 +0100] "GET /bras.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:34 +0100] "GET /an8.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:34 +0100] "GET /esp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:35 +0100] "GET /21x.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:35 +0100] "GET /out.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:35 +0100] "GET /flower2.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:36 +0100] "GET /family.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:36 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:36 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:37 +0100] "GET /asf.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:37 +0100] "GET /lanz.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:37 +0100] "GET /xeeex.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:38 +0100] "GET /tons.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:38 +0100] "GET /wpup.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:38 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:39 +0100] "GET /f2f.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:39 +0100] "GET /ths.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:39 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:40 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:40 +0100] "GET /d996699999.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:40 +0100] "GET /ierne.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:41 +0100] "GET /xde.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:41 +0100] "GET /1yade.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:41 +0100] "GET /gettest.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [18/Jan/2026:10:33:42 +0100] "GET /bjfl.php HTTP/1.1" 301 162 "-" "-" 172.70.94.173 - - [18/Jan/2026:10:35:18 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.134.167 - - [18/Jan/2026:11:09:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.17.39 - - [18/Jan/2026:11:24:00 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.221.13 - - [18/Jan/2026:11:55:43 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.221.12 - - [18/Jan/2026:11:57:16 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.159.120.250 - - [18/Jan/2026:12:16:28 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.41.23 - - [18/Jan/2026:12:21:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.69.17.38 - - [18/Jan/2026:12:43:46 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.131.169 - - [18/Jan/2026:14:04:35 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.22.24.143 - - [18/Jan/2026:14:11:48 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.156 - - [18/Jan/2026:15:26:06 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.159.113.111 - - [18/Jan/2026:15:29:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:144.0) Gecko/20100101 Firefox/144.0" 172.71.98.57 - - [18/Jan/2026:15:29:31 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:144.0) Gecko/20100101 Firefox/144.0" 172.71.203.120 - - [18/Jan/2026:15:30:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.159.119.62 - - [18/Jan/2026:15:30:45 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.69.40.143 - - [18/Jan/2026:16:20:14 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.69.40.143 - - [18/Jan/2026:16:20:14 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.69.40.143 - - [18/Jan/2026:16:20:14 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.69.40.143 - - [18/Jan/2026:16:20:14 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.69.40.143 - - [18/Jan/2026:16:20:14 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.69.40.143 - - [18/Jan/2026:16:20:14 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.69.40.143 - - [18/Jan/2026:16:20:15 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.70.215.115 - - [18/Jan/2026:16:27:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.70.100.151 - - [18/Jan/2026:16:48:34 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.58.147 - - [18/Jan/2026:18:11:20 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.49.201 - - [18/Jan/2026:18:34:09 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.126.44 - - [18/Jan/2026:19:33:58 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.191.73 - - [18/Jan/2026:19:37:26 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.71.191.73 - - [18/Jan/2026:19:37:26 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.71.190.8 - - [18/Jan/2026:19:37:26 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.71.190.8 - - [18/Jan/2026:19:37:27 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.71.190.8 - - [18/Jan/2026:19:37:27 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.71.190.8 - - [18/Jan/2026:19:37:27 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.71.190.8 - - [18/Jan/2026:19:37:27 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.71.99.155 - - [18/Jan/2026:19:53:04 +0100] "GET //code.jquery.com/jquery-latest.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.25 Safari/537.36 Core/1.70.3676.400 QQBrowser/10.4.3469.400" 172.69.7.184 - - [18/Jan/2026:20:56:42 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.17.39 - - [18/Jan/2026:22:16:34 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.184.206 - - [18/Jan/2026:22:39:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.100.151 - - [18/Jan/2026:23:39:02 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.182.192 - - [19/Jan/2026:00:17:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3" 172.70.126.44 - - [19/Jan/2026:01:01:37 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.68.22.143 - - [19/Jan/2026:01:13:04 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.23.177 - - [19/Jan/2026:01:16:38 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.69.58.146 - - [19/Jan/2026:02:25:12 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.184.206 - - [19/Jan/2026:03:22:39 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.68.10.40 - - [19/Jan/2026:03:24:03 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.71.255.95 - - [19/Jan/2026:03:48:42 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.17.38 - - [19/Jan/2026:05:11:33 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.255.96 - - [19/Jan/2026:06:34:09 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.255.96 - - [19/Jan/2026:07:56:37 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.64.217.20 - - [19/Jan/2026:08:08:33 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36" 172.68.242.5 - - [19/Jan/2026:08:48:30 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:31 +0100] "GET /var/www/tagtek/good.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:31 +0100] "GET /minishell.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:32 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:33 +0100] "GET //404.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:33 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:34 +0100] "GET /nae.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:34 +0100] "GET /tx38.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:35 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:35 +0100] "GET /cw.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:36 +0100] "GET /h.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:37 +0100] "GET /wp-2020.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:37 +0100] "GET /f2f.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:38 +0100] "GET /eru.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:38 +0100] "GET /uploader.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:39 +0100] "GET /.env.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:39 +0100] "GET /udd.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:40 +0100] "GET /xae.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:41 +0100] "GET /pi.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:41 +0100] "GET /wp-db.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:42 +0100] "GET /lx.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:42 +0100] "GET /batm.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:43 +0100] "GET /wp-add.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:43 +0100] "GET /lm13.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:44 +0100] "GET /wan.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:44 +0100] "GET /bypass403.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:45 +0100] "GET /444.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:45 +0100] "GET /fosil.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:46 +0100] "GET /xzs.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:46 +0100] "GET /led.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:47 +0100] "GET /LA.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:48 +0100] "GET /wsz.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:48 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:49 +0100] "GET /flower2.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:49 +0100] "GET /ans.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:50 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:50 +0100] "GET /o2.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:51 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:52 +0100] "GET /past.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:52 +0100] "GET /ws37.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:53 +0100] "GET /wpup.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:53 +0100] "GET /defaul.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:54 +0100] "GET /mc.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:54 +0100] "GET /woh.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:55 +0100] "GET /lok.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:55 +0100] "GET /991176.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:56 +0100] "GET /ws45.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:56 +0100] "GET /ws33.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:57 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:57 +0100] "GET /goat1.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:58 +0100] "GET /xeqdlun.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:59 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:48:59 +0100] "GET /ws34.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:00 +0100] "GET /b0.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:00 +0100] "GET /var/www/tagtek/bless.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:01 +0100] "GET /rcc.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:01 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:02 +0100] "GET /cux.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:02 +0100] "GET /family.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:03 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:04 +0100] "GET /Njima.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:04 +0100] "GET /wp-2018.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:05 +0100] "GET /asf.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:05 +0100] "GET /ulc2.ph HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:06 +0100] "GET /berm.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:06 +0100] "GET /indosec.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:07 +0100] "GET /hshs.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:07 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:08 +0100] "GET /fck.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:08 +0100] "GET /87.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:09 +0100] "GET /tons.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:10 +0100] "GET /Cache.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:10 +0100] "GET /504.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:11 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:11 +0100] "GET /xinder.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:12 +0100] "GET /sxx.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:12 +0100] "GET /gif.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:13 +0100] "GET /ws38.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:13 +0100] "GET /an8.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:14 +0100] "GET /z57.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:14 +0100] "GET /cp.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:15 +0100] "GET /lisa.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:15 +0100] "GET /oo.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:16 +0100] "GET /vxrl.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:17 +0100] "GET /ws28.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:17 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:18 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:18 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:19 +0100] "GET /ws35.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:19 +0100] "GET /h8h9.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:20 +0100] "GET /w0.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:20 +0100] "GET /indo.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:21 +0100] "GET /lanz.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:21 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:22 +0100] "GET /zy.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:22 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:23 +0100] "GET /f0x.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:23 +0100] "GET /yyy.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:24 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:25 +0100] "GET /ki1k.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:25 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:26 +0100] "GET /21x.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:26 +0100] "GET /ws36.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:27 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:27 +0100] "GET /sellSEX.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:28 +0100] "GET /ths.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:28 +0100] "GET /xxw.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:29 +0100] "GET /xeeex.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:29 +0100] "GET /alfa1.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:30 +0100] "GET /bras.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:30 +0100] "GET /public/new2.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:31 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:32 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:33 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:33 +0100] "GET /dirs.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:34 +0100] "GET /000.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:34 +0100] "GET /00.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:35 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:35 +0100] "GET /f8.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:36 +0100] "GET /dds.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:36 +0100] "GET /sck.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:37 +0100] "GET /bless14.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:37 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:38 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:39 +0100] "GET /b374k.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:39 +0100] "GET /old-index.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:40 +0100] "GET /acwfihfh.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:40 +0100] "GET /vv.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:41 +0100] "GET /JPG.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:41 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:42 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:42 +0100] "GET /alfa3.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:43 +0100] "GET /rendi59.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:43 +0100] "GET /2index.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:44 +0100] "GET /1p.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:45 +0100] "GET /.rxr.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:45 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:46 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:46 +0100] "GET /out.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:47 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:47 +0100] "GET /var/www/tagtek/ans.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:48 +0100] "GET /back.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:48 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:49 +0100] "GET /se.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:49 +0100] "GET /esp.php HTTP/1.1" 301 162 "-" "-" 172.68.242.5 - - [19/Jan/2026:08:49:50 +0100] "GET /rc.php HTTP/1.1" 301 162 "-" "-" 172.70.94.173 - - [19/Jan/2026:08:58:57 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.100.151 - - [19/Jan/2026:09:16:00 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.255.96 - - [19/Jan/2026:09:41:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.172.5 - - [19/Jan/2026:09:54:29 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.69.17.39 - - [19/Jan/2026:10:38:07 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.100.152 - - [19/Jan/2026:12:00:35 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.65.196 - - [19/Jan/2026:12:11:08 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:08 +0100] "GET /ver.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:09 +0100] "GET /ultra.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:09 +0100] "GET /pro.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:09 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:09 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:10 +0100] "GET /data.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:10 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:10 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:10 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:11 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:11 +0100] "GET /file22.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:11 +0100] "GET /check.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:11 +0100] "GET /wp-header-json.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:12 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:12 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:12 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:13 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:13 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:13 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:13 +0100] "GET /file56.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:14 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:14 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:14 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.69.65.196 - - [19/Jan/2026:12:11:15 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 104.22.24.143 - - [19/Jan/2026:13:21:33 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.155 - - [19/Jan/2026:13:23:23 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.159.104.103 - - [19/Jan/2026:13:44:56 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.221.12 - - [19/Jan/2026:14:01:19 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 104.23.221.12 - - [19/Jan/2026:14:01:33 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.22.1.198 - - [19/Jan/2026:14:08:43 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.58.146 - - [19/Jan/2026:14:46:46 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.131.169 - - [19/Jan/2026:16:10:04 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.68.124.133 - - [19/Jan/2026:16:31:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 104.23.221.13 - - [19/Jan/2026:16:31:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 104.23.221.13 - - [19/Jan/2026:16:33:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 172.68.10.41 - - [19/Jan/2026:16:33:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 104.23.221.12 - - [19/Jan/2026:16:35:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 104.23.221.12 - - [19/Jan/2026:16:35:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36" 172.69.17.39 - - [19/Jan/2026:17:33:16 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 108.162.246.117 - - [19/Jan/2026:17:40:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.68.245.187 - - [19/Jan/2026:18:51:07 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.245.165 - - [19/Jan/2026:18:51:08 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.245.165 - - [19/Jan/2026:18:51:08 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.68.245.165 - - [19/Jan/2026:18:51:08 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.68.245.165 - - [19/Jan/2026:18:51:08 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.245.165 - - [19/Jan/2026:18:51:09 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.68.245.165 - - [19/Jan/2026:18:51:09 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.70.100.152 - - [19/Jan/2026:18:57:20 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.154.85 - - [19/Jan/2026:19:10:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 172.69.17.38 - - [19/Jan/2026:20:21:41 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.22.20.234 - - [19/Jan/2026:20:28:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.167.130 - - [19/Jan/2026:20:28:19 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.22.1.199 - - [19/Jan/2026:20:51:09 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.1.181 - - [19/Jan/2026:20:51:09 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.17.38 - - [19/Jan/2026:21:40:39 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.184.207 - - [19/Jan/2026:22:38:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.59.227 - - [19/Jan/2026:22:56:51 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.69.58.50 - - [19/Jan/2026:22:56:51 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.69.58.50 - - [19/Jan/2026:22:56:52 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.69.58.50 - - [19/Jan/2026:22:56:52 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.69.58.50 - - [19/Jan/2026:22:56:52 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.69.58.50 - - [19/Jan/2026:22:56:52 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.69.58.50 - - [19/Jan/2026:22:56:52 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.69.17.38 - - [19/Jan/2026:23:04:52 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.126.44 - - [20/Jan/2026:00:28:36 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.143.186 - - [20/Jan/2026:01:14:15 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.71.254.220 - - [20/Jan/2026:01:52:29 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.134.112 - - [20/Jan/2026:02:53:58 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.229.37 - - [20/Jan/2026:02:53:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.254.83 - - [20/Jan/2026:03:14:03 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.68.10.10 - - [20/Jan/2026:04:38:01 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.10.11 - - [20/Jan/2026:04:41:49 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.170.13 - - [20/Jan/2026:04:57:08 +0100] "GET / HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (compatible; Example3/1.0; +https://www.example3.com/domain/immopoint-frankfurt.de)" 172.69.17.39 - - [20/Jan/2026:05:10:01 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.130.153 - - [20/Jan/2026:06:33:41 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.94.173 - - [20/Jan/2026:07:41:14 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.255.15 - - [20/Jan/2026:07:55:57 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.58.146 - - [20/Jan/2026:09:19:42 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.7.79 - - [20/Jan/2026:10:43:13 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.182.193 - - [20/Jan/2026:10:52:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 172.70.100.53 - - [20/Jan/2026:12:06:58 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.159.113.171 - - [20/Jan/2026:12:39:54 +0100] "GET /media/system/js/core.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.99.78 - - [20/Jan/2026:12:39:59 +0100] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.6.150 - - [20/Jan/2026:12:42:34 +0100] "GET / HTTP/1.1" 301 162 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 172.70.131.165 - - [20/Jan/2026:13:30:46 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.22.24.142 - - [20/Jan/2026:14:06:09 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.178.22 - - [20/Jan/2026:14:55:22 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.167.164 - - [20/Jan/2026:14:58:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 162.158.167.129 - - [20/Jan/2026:14:58:49 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.70.100.152 - - [20/Jan/2026:16:20:47 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.167.165 - - [20/Jan/2026:17:15:14 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.179.156 - - [20/Jan/2026:17:47:00 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.58.146 - - [20/Jan/2026:19:13:47 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.166.99 - - [20/Jan/2026:19:37:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.71.22.216 - - [20/Jan/2026:19:52:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 172.70.80.22 - - [20/Jan/2026:20:40:17 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.100.151 - - [20/Jan/2026:22:07:26 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.68.10.179 - - [20/Jan/2026:22:37:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.49.201 - - [20/Jan/2026:22:53:57 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 141.101.97.76 - - [20/Jan/2026:23:06:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.255.96 - - [20/Jan/2026:23:34:09 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.150.136 - - [20/Jan/2026:23:57:58 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.184.112 - - [20/Jan/2026:23:58:22 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.158.48.232 - - [21/Jan/2026:00:55:42 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.69.7.184 - - [21/Jan/2026:00:59:55 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.100.152 - - [21/Jan/2026:02:20:12 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.151.199 - - [21/Jan/2026:03:01:08 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.150.88 - - [21/Jan/2026:03:01:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.159.98.96 - - [21/Jan/2026:03:42:50 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.159.98.19 - - [21/Jan/2026:03:42:52 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 162.159.98.19 - - [21/Jan/2026:03:42:52 +0100] "GET /lm13.php HTTP/1.1" 301 162 "-" "-" 162.159.98.19 - - [21/Jan/2026:03:42:53 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 162.159.98.19 - - [21/Jan/2026:03:42:53 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 162.159.98.19 - - [21/Jan/2026:03:42:54 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 162.159.98.19 - - [21/Jan/2026:03:42:54 +0100] "GET /v3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.19 - - [21/Jan/2026:03:42:54 +0100] "GET /ilex.php HTTP/1.1" 301 162 "-" "-" 162.159.98.19 - - [21/Jan/2026:03:42:55 +0100] "GET /wto.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:55 +0100] "GET /777.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:56 +0100] "GET /file88.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:56 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:57 +0100] "GET /ffile.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:57 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:58 +0100] "GET /000.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:58 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:59 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:59 +0100] "GET /lol.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:42:59 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:00 +0100] "GET /o.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:00 +0100] "GET /aaa.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:01 +0100] "GET /n.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:01 +0100] "GET /666.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:02 +0100] "GET /fileas.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:02 +0100] "GET /cccc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:03 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:03 +0100] "GET /wfile.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:04 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:04 +0100] "GET /wb.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:04 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:05 +0100] "GET /mlex.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:05 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:05 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:06 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:06 +0100] "GET /inde.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:07 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:07 +0100] "GET /vee.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:07 +0100] "GET /wcas.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:08 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:08 +0100] "GET /finny.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:09 +0100] "GET /ws45.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:10 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:10 +0100] "GET /ws33.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:10 +0100] "GET /klex.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:11 +0100] "GET /ws34.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:11 +0100] "GET /alpa.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:12 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:13 +0100] "GET /444.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:14 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:14 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:15 +0100] "GET /ws38.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:15 +0100] "GET /555.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:15 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:16 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:16 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:17 +0100] "GET /he.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:17 +0100] "GET /cfile.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:17 +0100] "GET /doti.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:18 +0100] "GET /sko.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:18 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:19 +0100] "GET /ws37.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:19 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:20 +0100] "GET /nfile.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:20 +0100] "GET /file32.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:20 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:21 +0100] "GET /031.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:21 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:22 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:22 +0100] "GET /tx38.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:23 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:24 +0100] "GET /bless3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:25 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:25 +0100] "GET /akk.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:25 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:26 +0100] "GET /x7.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:26 +0100] "GET /ws36.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:27 +0100] "GET /0x0x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:27 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:28 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:29 +0100] "GET /card.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:29 +0100] "GET /size.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:30 +0100] "GET /class629.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:30 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:30 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:31 +0100] "GET /file18.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:31 +0100] "GET /file21.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:32 +0100] "GET /xxw.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:32 +0100] "GET /racs3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:33 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:33 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:33 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:34 +0100] "GET /moon3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:34 +0100] "GET /tor.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:35 +0100] "GET /haa.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:35 +0100] "GET /f6.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:35 +0100] "GET /asas.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:36 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:36 +0100] "GET /ava.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:36 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:37 +0100] "GET /v1.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:37 +0100] "GET /111.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:38 +0100] "GET /an7.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:39 +0100] "GET /xeqdlun.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:40 +0100] "GET /acp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:40 +0100] "GET /yellow.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:40 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:41 +0100] "GET /file3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:41 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:42 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:42 +0100] "GET /file15.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:43 +0100] "GET /file30.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:43 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:43 +0100] "GET /wp-is.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:44 +0100] "GET /hook.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:44 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:45 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:45 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:45 +0100] "GET /plss3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:46 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:46 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:47 +0100] "GET /file8.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:47 +0100] "GET /100.kb.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:47 +0100] "GET /ppp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:48 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:48 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:49 +0100] "GET /030.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:49 +0100] "GET /v4.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:49 +0100] "GET /xxx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:50 +0100] "GET /fs.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:50 +0100] "GET /33.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:51 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [21/Jan/2026:03:43:51 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.69.17.39 - - [21/Jan/2026:03:46:27 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.110.131 - - [21/Jan/2026:05:09:06 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:07 +0100] "GET /ol.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:07 +0100] "GET /sikma.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:08 +0100] "GET /rh1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:08 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:08 +0100] "GET /okxh.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:09 +0100] "GET /krypton.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:09 +0100] "GET /zoo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:09 +0100] "GET /system/logs/scorpiol.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:10 +0100] "GET /maul.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:10 +0100] "GET /protected/i.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:11 +0100] "GET /ru/adminer/adminer474.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:11 +0100] "GET /download.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:11 +0100] "GET /varb.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:12 +0100] "GET /assets/authorize.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:12 +0100] "GET /tt.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:12 +0100] "GET /a5e0a.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:13 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:13 +0100] "GET /55b76.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:14 +0100] "GET /rzki.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:14 +0100] "GET /acxx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:14 +0100] "GET /d12.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:15 +0100] "GET /s.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:15 +0100] "GET /error_log.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:15 +0100] "GET /qaez.php56 HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:16 +0100] "GET /dox.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:16 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:17 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:17 +0100] "GET /6kUgr4yGzxN.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:17 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:18 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:18 +0100] "GET /clss.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:18 +0100] "GET /44.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:19 +0100] "GET /ii5file.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:19 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:19 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:20 +0100] "GET /xsas.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:20 +0100] "GET /asus.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:21 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:21 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:21 +0100] "GET /domains.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:22 +0100] "GET /wp-goods.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:22 +0100] "GET /144.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:23 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:23 +0100] "GET /vanda.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:23 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:24 +0100] "GET /zc-104.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:24 +0100] "GET /zc-729.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:25 +0100] "GET /bo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:25 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:25 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:26 +0100] "GET /56c53.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:26 +0100] "GET /FII.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:26 +0100] "GET /wp-ac.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:27 +0100] "GET /atex1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:27 +0100] "GET /blox.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:28 +0100] "GET /wp-64wscx6shd.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:28 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:28 +0100] "GET /sxx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:28 +0100] "GET /mode.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:29 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:29 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:30 +0100] "GET /asd.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:30 +0100] "GET /5b9ac.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:30 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:31 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:31 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:32 +0100] "GET /lm15.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:32 +0100] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:32 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:33 +0100] "GET /admin836.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:33 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:05:09:33 +0100] "GET /lufix.php HTTP/1.1" 301 162 "-" "-" 172.70.126.45 - - [21/Jan/2026:05:12:51 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.94.173 - - [21/Jan/2026:06:23:33 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.69.58.147 - - [21/Jan/2026:06:38:02 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.199.167 - - [21/Jan/2026:06:58:48 +0100] "GET /userfuns.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.71.232.80 - - [21/Jan/2026:07:10:02 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.232.17 - - [21/Jan/2026:07:10:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.130.245 - - [21/Jan/2026:08:03:16 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.42.75 - - [21/Jan/2026:08:20:21 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 162.158.41.23 - - [21/Jan/2026:08:20:21 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.71.254.222 - - [21/Jan/2026:09:28:35 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.194.132 - - [21/Jan/2026:10:53:44 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.23.239.84 - - [21/Jan/2026:11:38:18 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.148.122 - - [21/Jan/2026:11:39:32 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.69.6.232 - - [21/Jan/2026:12:28:18 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.127.147 - - [21/Jan/2026:14:05:25 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.22.24.142 - - [21/Jan/2026:14:24:22 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.156 - - [21/Jan/2026:15:26:52 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.255.95 - - [21/Jan/2026:16:54:25 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.64.217.20 - - [21/Jan/2026:17:45:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.71.110.131 - - [21/Jan/2026:17:50:54 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:54 +0100] "GET /eee.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:55 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:55 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:56 +0100] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:56 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:57 +0100] "GET /support.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:57 +0100] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:57 +0100] "GET /dox.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:58 +0100] "GET /siteheads.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:58 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:58 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:59 +0100] "GET /wp-logout.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:59 +0100] "GET /87.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:50:59 +0100] "GET /0o0.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:00 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:00 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:00 +0100] "GET /wsheet1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:01 +0100] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:01 +0100] "GET /size.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:01 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:02 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:02 +0100] "GET /revision.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:02 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:03 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:03 +0100] "GET /img.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:03 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:04 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:04 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:04 +0100] "GET /shell20211028.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:05 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:05 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:05 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:06 +0100] "GET /baxa1.phP8 HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:06 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:06 +0100] "GET /tempfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:07 +0100] "GET /past.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:07 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:07 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:08 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:08 +0100] "GET /sf.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:08 +0100] "GET //simple.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:09 +0100] "GET /admiin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:09 +0100] "GET /9v6.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:09 +0100] "GET //doc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:10 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:10 +0100] "GET /F0x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:10 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:11 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:11 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:11 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:12 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:12 +0100] "GET /dbc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:12 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:13 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:13 +0100] "GET /oo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:13 +0100] "GET /ws35.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:14 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:14 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:14 +0100] "GET /wp-freya.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:15 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:15 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:15 +0100] "GET /ant.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:16 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:16 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:16 +0100] "GET /ws29.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:17 +0100] "GET /1100.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:17 +0100] "GET /ws46.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:17 +0100] "GET /ws43.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:18 +0100] "GET /ws36.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:18 +0100] "GET /ws34.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:18 +0100] "GET /rtx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:19 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:19 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:19 +0100] "GET /blox.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:19 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:20 +0100] "GET /mh.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:20 +0100] "GET /pn.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:20 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:21 +0100] "GET /smklh.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:21 +0100] "GET /mans.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:21 +0100] "GET /horeg.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:22 +0100] "GET /to.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:22 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:22 +0100] "GET /fz.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:23 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:23 +0100] "GET //x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:23 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:24 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:24 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:24 +0100] "GET /ws46.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:25 +0100] "GET /wp-22.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:25 +0100] "GET //user.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:25 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:26 +0100] "GET //content.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:26 +0100] "GET /wp-ana.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:26 +0100] "GET /cwclass.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:27 +0100] "GET /87.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:27 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:27 +0100] "GET /redi.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:28 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:28 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:28 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:29 +0100] "GET /indo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:29 +0100] "GET /0xx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:29 +0100] "GET /o.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:30 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:30 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:30 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:31 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:31 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:31 +0100] "GET /wp-configs.php? HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:32 +0100] "GET /file.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:32 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:32 +0100] "GET /s.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:33 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:33 +0100] "GET /ng.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:33 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:34 +0100] "GET /webix.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:34 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:34 +0100] "GET /hans.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:35 +0100] "GET //403.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:35 +0100] "GET //404.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [21/Jan/2026:17:51:35 +0100] "GET //buy.php HTTP/1.1" 301 162 "-" "-" 172.69.7.184 - - [21/Jan/2026:18:22:36 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.49.201 - - [21/Jan/2026:19:43:02 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.234 - - [21/Jan/2026:19:43:03 +0100] "GET /baixy.php HTTP/1.1" 301 162 "-" "-" 162.158.49.234 - - [21/Jan/2026:19:43:03 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "-" "-" 162.158.49.234 - - [21/Jan/2026:19:43:03 +0100] "GET /nf.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:04 +0100] "GET /davaa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:04 +0100] "GET /ceiif.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:04 +0100] "GET /sst.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:05 +0100] "GET /class-db.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:05 +0100] "GET /tmpls.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:05 +0100] "GET /ver.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:06 +0100] "GET /ultra.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:06 +0100] "GET /pro.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:06 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:07 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:07 +0100] "GET /data.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:07 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:08 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:08 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:08 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:08 +0100] "GET /file22.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:09 +0100] "GET /check.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:09 +0100] "GET /wp-header-json.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:09 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:10 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:10 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:10 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:11 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:11 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:11 +0100] "GET /file56.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:12 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [21/Jan/2026:19:43:12 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.69.17.39 - - [21/Jan/2026:19:50:14 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.159.120.250 - - [21/Jan/2026:20:24:15 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.147.174 - - [21/Jan/2026:20:27:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.70.179.156 - - [21/Jan/2026:21:12:05 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.6.151 - - [21/Jan/2026:22:11:05 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:06 +0100] "GET /baixy.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:07 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:07 +0100] "GET /nf.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:07 +0100] "GET /davaa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:07 +0100] "GET /ceiif.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:08 +0100] "GET /sst.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:08 +0100] "GET /class-db.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:08 +0100] "GET /tmpls.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:09 +0100] "GET /ver.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:09 +0100] "GET /ultra.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:09 +0100] "GET /pro.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:10 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:10 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:10 +0100] "GET /data.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:11 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:11 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:11 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:12 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:12 +0100] "GET /file22.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:12 +0100] "GET /check.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:13 +0100] "GET /wp-header-json.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:13 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:13 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:14 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:14 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:14 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:14 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:15 +0100] "GET /file56.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:15 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [21/Jan/2026:22:11:15 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.68.10.40 - - [21/Jan/2026:22:37:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.58.147 - - [21/Jan/2026:22:39:59 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.69.7.184 - - [22/Jan/2026:00:07:52 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.99.118 - - [22/Jan/2026:00:58:55 +0100] "GET / HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 172.70.131.169 - - [22/Jan/2026:01:20:09 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.126.45 - - [22/Jan/2026:02:38:10 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 162.158.182.163 - - [22/Jan/2026:03:27:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 172.69.7.184 - - [22/Jan/2026:04:07:12 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 104.22.1.198 - - [22/Jan/2026:04:54:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.126.45 - - [22/Jan/2026:05:34:59 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.100.151 - - [22/Jan/2026:07:02:23 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.195.119 - - [22/Jan/2026:08:15:59 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 172.70.127.122 - - [22/Jan/2026:08:30:59 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.164.174 - - [22/Jan/2026:08:43:15 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.68.10.40 - - [22/Jan/2026:08:43:38 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.68.22.143 - - [22/Jan/2026:08:46:34 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.68.23.177 - - [22/Jan/2026:08:49:50 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.23.175.111 - - [22/Jan/2026:09:18:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 104.23.175.96 - - [22/Jan/2026:09:18:14 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.175.96 - - [22/Jan/2026:09:18:15 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.96 - - [22/Jan/2026:09:18:15 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 104.23.175.96 - - [22/Jan/2026:09:18:16 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 104.23.175.96 - - [22/Jan/2026:09:18:16 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 104.23.175.96 - - [22/Jan/2026:09:18:17 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.96 - - [22/Jan/2026:09:18:17 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 104.23.175.96 - - [22/Jan/2026:09:18:18 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 104.23.175.96 - - [22/Jan/2026:09:18:18 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 104.23.175.96 - - [22/Jan/2026:09:18:19 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.70.179.156 - - [22/Jan/2026:09:58:23 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.70.47.82 - - [22/Jan/2026:10:46:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.100.221 - - [22/Jan/2026:11:25:45 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0" 172.71.241.112 - - [22/Jan/2026:13:34:47 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.22.24.143 - - [22/Jan/2026:13:49:18 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.167.166 - - [22/Jan/2026:14:30:05 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 162.158.174.130 - - [22/Jan/2026:14:37:43 +0100] "GET /wp/wp-login.php HTTP/1.1" 301 162 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 172.71.170.182 - - [22/Jan/2026:14:45:16 +0100] "GET /wordpress/wp-login.php HTTP/1.1" 301 162 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 172.70.207.135 - - [22/Jan/2026:15:15:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.108 - - [22/Jan/2026:15:20:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.182.193 - - [22/Jan/2026:16:04:01 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.217.46 - - [22/Jan/2026:16:05:44 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.168.109 - - [22/Jan/2026:16:16:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.71.95.95 - - [22/Jan/2026:16:16:09 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.182.192 - - [22/Jan/2026:16:58:22 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; wbx 1.0.0)" 104.23.223.132 - - [22/Jan/2026:16:58:22 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Opera/9.80 (Windows NT 6.1; WOW64; U; ru) Presto/2.10.289 Version/12.02" 172.68.183.71 - - [22/Jan/2026:16:58:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20060919 Firefox/1.5.0.7" 162.158.172.5 - - [22/Jan/2026:16:58:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3" 172.68.183.71 - - [22/Jan/2026:16:58:22 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; fr-FR; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17" 162.158.172.5 - - [22/Jan/2026:16:58:23 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.107 Safari/537.36 OPR/31.0.1889.99" 172.68.183.71 - - [22/Jan/2026:16:58:24 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET CLR 1.1.4322; .NET4.0C; .NET4.0E)" 172.64.200.183 - - [22/Jan/2026:16:58:24 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 172.68.183.71 - - [22/Jan/2026:16:58:25 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/312.5 (KHTML, like Gecko) Safari/312.3" 104.23.221.94 - - [22/Jan/2026:16:58:25 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-G950U Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Mobile Safari/537.36" 172.64.200.183 - - [22/Jan/2026:16:58:25 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Opera/9.02 (Windows NT 5.0; U; en)" 162.158.172.105 - - [22/Jan/2026:16:58:26 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 2.3.3; en-ca; GT-I9000M Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 104.23.217.153 - - [22/Jan/2026:16:58:26 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.72 Safari/537.36 OPR/19.0.1340.69721" 162.158.103.84 - - [22/Jan/2026:16:58:27 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.8) Gecko/20071015 SUSE/2.0.0.8-1.1 Firefox/2.0.0.8" 172.64.200.183 - - [22/Jan/2026:16:58:27 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SAMSUNG SM-G361F Build/LMY48B) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.3 Chrome/38.0.2125.102 Mobile Safari/537.36" 104.23.223.132 - - [22/Jan/2026:16:58:28 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.17" 104.23.217.153 - - [22/Jan/2026:16:58:28 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1b3pre) Gecko/20090105 Firefox/3.1b3pre" 172.70.126.44 - - [22/Jan/2026:18:02:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.70.111.162 - - [22/Jan/2026:18:02:53 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 104.23.166.95 - - [22/Jan/2026:19:26:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 162.158.167.130 - - [22/Jan/2026:19:57:41 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 162.158.90.60 - - [22/Jan/2026:19:58:18 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.71.241.113 - - [22/Jan/2026:19:58:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.70.214.21 - - [22/Jan/2026:19:59:28 +0100] "GET /fwc HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 104.23.166.73 - - [22/Jan/2026:20:00:17 +0100] "GET /fzh HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.70.206.124 - - [22/Jan/2026:20:00:28 +0100] "GET /res/favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.71.99.73 - - [22/Jan/2026:20:00:32 +0100] "GET /assets/favicon-aOK6_042.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.71.182.57 - - [22/Jan/2026:20:00:39 +0100] "GET /images/01.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.70.47.40 - - [22/Jan/2026:20:00:42 +0100] "GET /res/favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.70.46.97 - - [22/Jan/2026:20:00:46 +0100] "GET /wp-content/uploads/2020/10/official-logo-512x512.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.71.95.95 - - [22/Jan/2026:20:01:04 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 162.158.186.191 - - [22/Jan/2026:20:01:21 +0100] "GET /wp-content/uploads/2023/02/1677572030-814390417fe413b.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 104.23.251.66 - - [22/Jan/2026:20:01:48 +0100] "GET /icons/favicon.ico HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 162.159.113.40 - - [22/Jan/2026:20:01:58 +0100] "GET /wp-content/uploads/2023/08/logo-gold.png HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.70.215.31 - - [22/Jan/2026:20:02:03 +0100] "GET /favicon-32x32.png?v=e0e3ed8f59d769b053c145391db63c0d HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.70.215.31 - - [22/Jan/2026:20:02:23 +0100] "GET /favicon-32x32.png?v=e0e3ed8f59d769b053c145391db63c0d HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 104.23.170.171 - - [22/Jan/2026:20:02:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.71.103.123 - - [22/Jan/2026:20:03:05 +0100] "GET /assets/GanjingAbout-0xqqgv2B.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.69.109.54 - - [22/Jan/2026:20:03:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 172.70.215.107 - - [22/Jan/2026:20:18:26 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 104.23.251.195 - - [22/Jan/2026:20:20:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" 108.162.216.127 - - [22/Jan/2026:20:27:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.68.35.167 - - [22/Jan/2026:20:49:53 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.35.95 - - [22/Jan/2026:20:49:53 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.68.35.95 - - [22/Jan/2026:20:49:54 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.68.35.95 - - [22/Jan/2026:20:49:54 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.35.95 - - [22/Jan/2026:20:49:54 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.68.35.95 - - [22/Jan/2026:20:49:54 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.35.95 - - [22/Jan/2026:20:49:54 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 108.162.226.149 - - [22/Jan/2026:21:28:39 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133" 172.71.184.46 - - [22/Jan/2026:22:39:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.17.39 - - [23/Jan/2026:01:23:21 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.70.126.44 - - [23/Jan/2026:01:24:50 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.46.204 - - [23/Jan/2026:01:44:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.94.217 - - [23/Jan/2026:03:01:00 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.70.207.143 - - [23/Jan/2026:03:01:22 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 172.70.215.83 - - [23/Jan/2026:03:01:46 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 162.158.187.22 - - [23/Jan/2026:03:02:02 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 162.158.186.250 - - [23/Jan/2026:03:02:13 +0100] "GET /sitemap.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 162.158.90.61 - - [23/Jan/2026:03:02:20 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 172.71.184.207 - - [23/Jan/2026:03:03:00 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.159.113.118 - - [23/Jan/2026:03:11:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 162.159.113.75 - - [23/Jan/2026:03:11:30 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 172.71.103.56 - - [23/Jan/2026:03:11:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 104.23.170.182 - - [23/Jan/2026:03:11:43 +0100] "GET /sitemap.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 104.23.168.12 - - [23/Jan/2026:03:11:49 +0100] "GET /config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 172.71.152.52 - - [23/Jan/2026:04:25:32 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.48.232 - - [23/Jan/2026:05:29:52 +0100] "HEAD / HTTP/1.1" 301 0 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 162.158.48.195 - - [23/Jan/2026:05:29:53 +0100] "GET / HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 172.71.95.129 - - [23/Jan/2026:07:41:32 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.70.65 - - [23/Jan/2026:09:33:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 104.22.1.199 - - [23/Jan/2026:11:26:20 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.23.81 - - [23/Jan/2026:11:26:21 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.245.63 - - [23/Jan/2026:11:30:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.245.63 - - [23/Jan/2026:11:30:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.24.143 - - [23/Jan/2026:12:07:57 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.182.193 - - [23/Jan/2026:12:22:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 104.23.217.46 - - [23/Jan/2026:12:33:31 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.217.46 - - [23/Jan/2026:12:34:12 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 104.22.1.165 - - [23/Jan/2026:12:41:20 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.245.77 - - [23/Jan/2026:12:47:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.162.96 - - [23/Jan/2026:13:27:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.88.111 - - [23/Jan/2026:13:27:55 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.70.92.156 - - [23/Jan/2026:13:28:02 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.70.92.156 - - [23/Jan/2026:13:28:03 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.70.92.156 - - [23/Jan/2026:13:28:03 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.70.92.156 - - [23/Jan/2026:13:28:04 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.70.92.156 - - [23/Jan/2026:13:28:04 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.70.92.156 - - [23/Jan/2026:13:28:04 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.70.92.156 - - [23/Jan/2026:13:28:05 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.70.92.156 - - [23/Jan/2026:13:28:05 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.70.92.156 - - [23/Jan/2026:13:28:06 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 104.23.209.114 - - [23/Jan/2026:13:48:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0" 104.23.175.157 - - [23/Jan/2026:17:12:01 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.71.134.112 - - [23/Jan/2026:17:37:30 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.229.113 - - [23/Jan/2026:17:37:31 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.170.37 - - [23/Jan/2026:19:53:52 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 104.23.211.195 - - [23/Jan/2026:20:23:06 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 104.23.211.229 - - [23/Jan/2026:20:23:07 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 104.23.211.229 - - [23/Jan/2026:20:23:07 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 104.23.211.229 - - [23/Jan/2026:20:23:07 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 104.23.211.229 - - [23/Jan/2026:20:23:07 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 104.23.211.229 - - [23/Jan/2026:20:23:08 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 104.23.211.229 - - [23/Jan/2026:20:23:08 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.10.127 - - [23/Jan/2026:22:42:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.35.168 - - [23/Jan/2026:23:36:48 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.68.35.168 - - [23/Jan/2026:23:36:48 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.68.35.168 - - [23/Jan/2026:23:36:48 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.68.35.168 - - [23/Jan/2026:23:36:49 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.68.35.168 - - [23/Jan/2026:23:36:49 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.68.35.168 - - [23/Jan/2026:23:36:49 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.68.35.168 - - [23/Jan/2026:23:36:49 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.70.42.178 - - [24/Jan/2026:01:32:36 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 172.71.147.173 - - [24/Jan/2026:01:32:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 104.23.221.189 - - [24/Jan/2026:01:37:34 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 162.158.90.60 - - [24/Jan/2026:04:55:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.48.232 - - [24/Jan/2026:06:06:17 +0100] "HEAD / HTTP/1.1" 301 0 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 162.158.48.195 - - [24/Jan/2026:06:06:18 +0100] "GET / HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 172.64.217.21 - - [24/Jan/2026:06:53:09 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36" 172.71.184.207 - - [24/Jan/2026:07:05:13 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.71.246.228 - - [24/Jan/2026:07:05:13 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.69.17.179 - - [24/Jan/2026:07:17:39 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.254.245 - - [24/Jan/2026:08:21:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.103.55 - - [24/Jan/2026:11:16:48 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)" 172.71.99.51 - - [24/Jan/2026:11:16:48 +0100] "GET / HTTP/1.1" 301 162 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)" 172.69.234.150 - - [24/Jan/2026:11:51:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 162.158.48.232 - - [24/Jan/2026:13:26:13 +0100] "HEAD / HTTP/1.1" 301 0 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 162.158.48.232 - - [24/Jan/2026:13:26:14 +0100] "GET / HTTP/1.1" 301 162 "http://immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 104.23.162.12 - - [24/Jan/2026:14:24:09 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.94.118 - - [24/Jan/2026:15:03:05 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.70.219.176 - - [24/Jan/2026:15:03:05 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 104.23.221.137 - - [24/Jan/2026:17:15:18 +0100] "GET / HTTP/1.1" 301 162 "immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 172.70.242.220 - - [24/Jan/2026:17:24:29 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.217.47 - - [24/Jan/2026:17:27:33 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.22.1.199 - - [24/Jan/2026:19:49:37 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.90.106 - - [24/Jan/2026:19:49:37 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.232.80 - - [24/Jan/2026:21:50:34 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.225.149 - - [24/Jan/2026:21:50:34 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.50.159 - - [24/Jan/2026:22:44:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.182.7 - - [24/Jan/2026:22:47:05 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 104.23.168.109 - - [24/Jan/2026:22:47:07 +0100] "GET /.svn/wc.db HTTP/1.1" 301 162 "-" "Mozilla/5.0" 104.23.168.109 - - [24/Jan/2026:22:47:07 +0100] "GET /.svn/entries HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.71.182.6 - - [24/Jan/2026:23:00:12 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.100.151 - - [24/Jan/2026:23:26:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.70.126.45 - - [24/Jan/2026:23:28:10 +0100] "GET /images/favicon.jpg HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.68.36.155 - - [25/Jan/2026:01:47:55 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.159.120.251 - - [25/Jan/2026:02:51:34 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.42.206 - - [25/Jan/2026:02:55:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.23.223.110 - - [25/Jan/2026:04:41:00 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 162.158.38.207 - - [25/Jan/2026:04:44:37 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 104.23.175.157 - - [25/Jan/2026:05:25:17 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.71.255.96 - - [25/Jan/2026:06:54:33 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 162.158.6.150 - - [25/Jan/2026:11:42:19 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [25/Jan/2026:11:42:20 +0100] "GET /baixy.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [25/Jan/2026:11:42:20 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [25/Jan/2026:11:42:21 +0100] "GET /nf.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [25/Jan/2026:11:42:21 +0100] "GET /davaa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [25/Jan/2026:11:42:21 +0100] "GET /ceiif.php HTTP/1.1" 301 162 "-" "-" 162.158.6.18 - - [25/Jan/2026:11:42:22 +0100] "GET /sst.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:22 +0100] "GET /class-db.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:22 +0100] "GET /tmpls.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:23 +0100] "GET /ver.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:23 +0100] "GET /ultra.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:23 +0100] "GET /pro.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:24 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:24 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:24 +0100] "GET /data.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:24 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:25 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:25 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:25 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:26 +0100] "GET /file22.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:26 +0100] "GET /check.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:26 +0100] "GET /wp-header-json.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:27 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:27 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:27 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:28 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:28 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:28 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:29 +0100] "GET /file56.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:29 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [25/Jan/2026:11:42:29 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 172.68.10.41 - - [25/Jan/2026:11:52:57 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.127.137 - - [25/Jan/2026:13:41:35 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.255.86 - - [25/Jan/2026:14:15:21 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.159.120.250 - - [25/Jan/2026:15:05:52 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.147.174 - - [25/Jan/2026:15:08:52 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.255.96 - - [25/Jan/2026:15:59:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 108.162.238.85 - - [25/Jan/2026:16:45:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.138.196 - - [25/Jan/2026:18:19:09 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 172.68.138.196 - - [25/Jan/2026:18:19:09 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.68.138.196 - - [25/Jan/2026:18:19:10 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.138.196 - - [25/Jan/2026:18:19:10 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.138.196 - - [25/Jan/2026:18:19:10 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.68.138.196 - - [25/Jan/2026:18:19:10 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.138.196 - - [25/Jan/2026:18:19:10 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 104.22.1.199 - - [25/Jan/2026:18:32:04 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.183.70 - - [25/Jan/2026:18:40:13 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 162.158.182.193 - - [25/Jan/2026:18:40:14 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 172.69.23.43 - - [25/Jan/2026:20:02:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.68.10.41 - - [25/Jan/2026:22:24:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.221.95 - - [25/Jan/2026:23:17:25 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; CrOS x86_64 9202.64.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.146 Safari/537.36" 162.158.182.193 - - [25/Jan/2026:23:17:25 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.3; en-us; KFAPWI Build/KTU84M) AppleWebKit/537.36 (KHTML, like Gecko) Silk/3.68 like Chrome/39.0.2171.93 Safari/537.36" 162.158.172.104 - - [25/Jan/2026:23:17:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (SymbianOS 9.4; Series60/5.0 NokiaN97-1/10.0.012; Profile/MIDP-2.1 Configuration/CLDC-1.1; en-us) AppleWebKit/525 (KHTML, like Gecko) WicKed/7.1.12344" 162.158.103.4 - - [25/Jan/2026:23:17:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-N920P Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/4.0 Chrome/44.0.2403.133 Mobile Safari/537.36" 172.64.200.183 - - [25/Jan/2026:23:17:26 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0; LG-D850 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.97 Mobile Safari/537.36" 162.158.103.4 - - [25/Jan/2026:23:17:26 +0100] "GET /api/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.17) Gecko/2010011010 Mandriva/1.9.0.17-0.1mdv2009.1 (2009.1) Firefox/3.0.17 GTB6" 172.68.183.72 - - [25/Jan/2026:23:17:26 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5X Build/MDB08L) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.124 Mobile Safari/537.36" 162.158.103.4 - - [25/Jan/2026:23:17:26 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.8) Gecko/20100202 Firefox/3.5.8 (.NET CLR 3.5.30729) FirePHP/0.4" 162.158.172.104 - - [25/Jan/2026:23:17:26 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.0.1; VS985 4G Build/LRX21Y) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Mobile Safari/537.36" 172.64.200.98 - - [25/Jan/2026:23:17:27 +0100] "GET /admin/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:42.0) Gecko/20100101 Firefox/42.0" 104.23.223.133 - - [25/Jan/2026:23:17:27 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; en-US) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" 104.23.221.217 - - [25/Jan/2026:23:17:27 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 104.23.221.137 - - [25/Jan/2026:23:17:27 +0100] "GET /backend/.env HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98) Opera 7.23 [en]" 172.64.200.183 - - [25/Jan/2026:23:17:28 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Opera/9.30 (Nintendo Wii; U; ; 2047-7; de)" 162.158.182.193 - - [25/Jan/2026:23:17:28 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 2.2; pt-br; GT-P1000L Build/FROYO) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 104.23.221.95 - - [25/Jan/2026:23:17:28 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; de; rv:1.9.2.10) Gecko/20100915 Ubuntu/10.04 (lucid) Firefox/3.6.10" 104.23.221.137 - - [25/Jan/2026:23:17:28 +0100] "GET /staging/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; sv-SE) AppleWebKit/523.13 (KHTML, like Gecko) Version/3.0 Safari/523.13" 172.68.183.72 - - [25/Jan/2026:23:17:28 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" 172.64.200.98 - - [25/Jan/2026:23:17:28 +0100] "GET /core/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.5) Gecko/20060801 Firefox/1.5.0.5" 162.158.103.4 - - [25/Jan/2026:23:17:29 +0100] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows 8) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.112 Safari/534.30" 162.158.103.83 - - [25/Jan/2026:23:17:29 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; U; Linux i686; nl; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6" 104.23.221.95 - - [25/Jan/2026:23:17:29 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Getter/0.1)" 162.158.172.5 - - [25/Jan/2026:23:17:29 +0100] "GET /info/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.168 Safari/537.36 OPR/51.0.2830.40" 172.68.183.72 - - [25/Jan/2026:23:17:29 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3_3 like Mac OS X; en-us) AppleWebKit/1533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8J2 Safari/61533.18.5" 162.158.172.5 - - [25/Jan/2026:23:17:29 +0100] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; zh-cn) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" 162.158.103.83 - - [25/Jan/2026:23:17:30 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; cs) AppleWebKit/522.13.1 (KHTML, like Gecko) Version/3.0.2 Safari/522.13.1" 104.23.223.111 - - [25/Jan/2026:23:17:30 +0100] "GET /app/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 172.64.198.196 - - [25/Jan/2026:23:17:30 +0100] "GET /test HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36 OPR/50.0.2762.45" 172.71.255.86 - - [26/Jan/2026:00:35:19 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.71.255.125 - - [26/Jan/2026:00:35:20 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.71.255.125 - - [26/Jan/2026:00:35:20 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.71.255.125 - - [26/Jan/2026:00:35:20 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.71.255.125 - - [26/Jan/2026:00:35:20 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.71.255.125 - - [26/Jan/2026:00:35:21 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.71.255.125 - - [26/Jan/2026:00:35:21 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.69.109.54 - - [26/Jan/2026:03:04:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 104.23.217.47 - - [26/Jan/2026:04:02:58 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.182.193 - - [26/Jan/2026:04:06:23 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.69.151.200 - - [26/Jan/2026:04:19:56 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.148.156 - - [26/Jan/2026:04:19:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.71.255.96 - - [26/Jan/2026:06:30:04 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.170.36 - - [26/Jan/2026:07:31:07 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 104.23.223.111 - - [26/Jan/2026:08:01:51 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 104.23.223.111 - - [26/Jan/2026:08:02:11 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.178.121 - - [26/Jan/2026:08:06:11 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.165 - - [26/Jan/2026:08:06:12 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.165 - - [26/Jan/2026:08:06:12 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.165 - - [26/Jan/2026:08:06:12 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.165 - - [26/Jan/2026:08:06:12 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.165 - - [26/Jan/2026:08:06:12 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.165 - - [26/Jan/2026:08:06:13 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:13 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:13 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:13 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:06:13 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:13 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:06:14 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:14 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:14 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:14 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:14 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:06:14 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:14 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:06:14 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:14 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:15 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:15 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:15 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:15 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:15 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:06:15 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:15 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:15 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:15 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:15 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:16 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:06:16 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:06:16 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:16 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:16 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:16 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:16 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:06:16 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:06:16 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:16 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:17 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:17 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:17 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:17 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:06:17 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:17 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:06:17 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:17 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:17 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:17 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:18 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:06:18 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:18 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:18 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:18 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:18 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:06:18 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:18 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:06:18 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:18 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:19 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:06:19 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:19 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:19 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:19 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:19 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:19 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:19 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:06:19 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:19 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:06:19 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:20 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:20 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:20 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:20 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:20 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:20 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:20 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:20 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:21 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:21 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:21 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:06:21 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:21 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:21 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:21 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:21 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:21 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:22 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:22 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:06:22 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:22 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:22 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:06:22 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:22 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:22 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:22 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:06:22 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:23 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:23 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:23 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:23 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:23 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:23 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:23 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:23 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:23 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:23 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:24 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:24 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:24 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:24 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:24 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:24 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:24 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:24 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:24 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:24 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:06:25 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:25 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:25 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:06:25 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:25 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:06:25 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:25 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:25 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:06:25 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:06:25 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:25 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:26 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:26 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:26 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:26 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:26 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:06:26 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:26 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:26 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:06:26 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:26 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:06:27 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:27 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:06:27 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:06:27 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:27 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:27 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:27 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:27 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:27 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:06:27 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:06:28 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:28 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:28 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:06:28 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:28 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:28 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:28 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:06:28 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:29 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:06:29 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:29 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:06:29 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:29 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:29 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:29 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:29 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:29 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:29 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:06:30 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:06:30 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:30 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:30 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:06:30 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:30 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:30 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:30 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:30 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:31 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:06:31 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:31 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:06:31 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:31 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:31 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:31 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:31 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:31 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:32 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:32 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:32 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:06:32 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:32 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:32 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:32 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:32 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:32 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:06:33 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:33 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:33 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:33 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:33 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:33 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:06:33 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:06:33 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:33 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:33 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:06:33 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:33 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:34 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:34 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:34 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:06:34 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:34 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:34 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:34 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:34 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:34 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:06:35 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:35 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:35 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:35 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:06:35 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:35 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:35 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:06:35 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:35 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:06:36 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:36 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:06:36 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:36 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:36 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:36 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:06:36 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:36 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:36 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:36 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:37 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:37 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:37 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:37 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:37 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:06:37 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:37 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:37 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:37 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:37 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:37 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:37 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:38 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:38 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:38 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:06:38 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:38 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:38 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:38 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:38 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:38 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:39 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:39 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:39 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:39 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:39 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:39 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:39 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:39 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:39 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:39 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:06:40 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:40 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:06:40 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:40 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:40 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:40 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:40 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:40 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:06:40 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:06:40 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:41 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:41 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:41 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:41 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:41 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:41 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:41 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:41 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:41 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:41 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:42 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:42 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:42 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:42 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:06:42 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:06:42 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:42 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:42 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:42 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:06:43 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:43 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:43 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:43 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:43 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:43 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:44 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:06:44 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:44 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:06:45 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:45 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:45 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:45 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:45 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:45 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:45 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:45 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:06:45 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:46 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:06:46 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:46 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:06:46 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:46 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:46 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:46 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:46 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:46 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:46 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:06:47 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:06:47 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:06:47 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:47 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:47 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:47 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:47 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:06:47 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:47 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:48 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:48 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:48 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:48 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:48 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:48 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:06:48 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:48 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:48 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:06:48 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:06:49 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:49 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:49 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:06:49 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:06:49 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:49 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:49 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:49 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:49 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:50 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:06:50 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:50 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:50 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:50 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:50 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:50 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:50 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:50 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:50 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:51 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:51 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:51 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:06:51 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:06:51 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:51 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:51 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:51 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:51 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:06:51 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:52 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:52 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:52 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:06:52 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:52 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:52 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:52 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:52 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:52 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:53 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:53 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:06:53 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:06:53 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:53 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:53 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:53 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:06:53 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:53 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:53 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:06:54 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:54 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:54 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:54 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:54 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:54 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:06:54 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:54 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:54 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:54 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:06:55 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:06:55 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:55 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:55 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:55 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:55 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:55 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:06:55 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:55 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:06:55 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:56 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:56 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:56 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:06:56 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:56 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:56 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:06:56 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:06:56 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:06:56 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:56 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:06:57 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:57 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:06:57 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:57 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:57 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:06:57 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:57 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:57 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:58 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:58 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:06:58 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:06:58 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:06:58 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:06:58 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:06:58 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:06:58 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:06:58 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:58 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:58 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:06:59 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:06:59 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:59 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:06:59 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:06:59 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:06:59 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:06:59 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:06:59 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:00 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:00 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:00 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:00 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:07:00 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:00 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:07:00 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:00 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:00 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:00 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:01 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:07:01 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:01 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:01 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:01 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:01 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:07:01 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:01 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:01 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:01 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:02 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:07:02 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:02 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:07:02 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:02 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:02 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:02 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:02 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:02 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:03 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:03 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:03 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:03 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:07:03 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:03 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:03 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:03 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:04 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:04 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:07:04 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:04 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:04 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:04 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:04 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:04 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:04 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:04 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:07:05 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:07:05 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:05 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:05 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:05 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:05 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:05 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:05 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:05 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:05 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:06 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:06 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:06 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:07:06 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:06 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:06 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:07:06 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:07:06 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:06 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:06 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:07 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:07 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:07 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:07 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:07 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:07 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:07 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:07:07 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:07:07 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:07:07 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:08 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:08 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:08 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:07:08 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:08 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:08 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:08 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:08 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:08 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:07:09 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:09 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:09 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:09 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:09 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:09 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:09 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:07:09 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:09 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:09 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:07:10 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:10 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:10 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:10 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:10 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:10 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:07:10 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:10 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:07:10 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:07:10 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:07:11 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:11 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:11 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:11 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:11 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:11 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:11 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:11 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:11 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:12 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:12 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:12 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:12 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:12 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:12 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:12 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:13 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:13 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:13 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:13 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:13 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:13 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:07:13 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:07:13 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:13 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:13 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:14 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:14 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:07:14 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:14 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:07:14 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:14 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:14 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:14 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:15 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:15 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:15 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:15 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:15 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:15 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:07:15 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:15 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:15 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:07:15 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:16 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:07:16 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:16 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:16 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:16 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:16 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:16 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:16 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:16 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:16 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:17 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:17 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:17 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:17 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:17 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:17 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:17 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:17 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:17 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:18 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:18 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:18 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:18 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:18 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:18 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:18 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:18 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:18 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:18 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:19 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:19 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:19 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:19 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:19 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:19 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:19 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:19 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:19 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:19 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:20 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:07:20 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:20 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:07:20 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:07:20 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:20 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:20 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:07:20 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:07:20 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:21 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:21 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:21 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:21 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:21 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:21 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:21 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:21 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:21 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:21 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:21 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:07:22 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:22 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:22 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:22 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:07:22 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:22 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:22 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:07:22 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:22 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:23 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:23 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:23 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:23 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:23 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:23 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:23 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:23 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:23 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:23 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:24 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:24 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:24 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:07:24 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:24 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:24 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:24 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:25 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:25 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:07:25 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:07:25 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:25 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:25 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:07:25 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:25 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:07:25 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:25 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:26 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:26 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:07:26 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:26 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:07:26 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:26 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:26 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:26 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:27 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:27 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:27 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:07:27 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:27 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:27 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:27 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:27 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:27 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:07:27 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:28 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:28 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:07:28 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:28 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:28 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:07:28 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:07:28 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:28 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:29 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:07:29 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:29 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:29 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:29 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:29 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:29 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:07:29 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:29 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:29 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:30 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:30 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:30 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:30 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:07:30 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:30 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:07:30 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:30 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:30 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:07:30 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:07:31 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:07:31 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:31 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:31 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:31 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:31 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:31 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:31 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:31 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:31 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:32 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:32 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:32 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:32 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:32 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:32 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:32 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:32 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:32 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:32 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:33 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:33 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:33 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:07:33 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:33 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:33 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:33 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:07:33 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:33 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:33 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:34 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:34 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:34 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:34 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:34 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:34 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:34 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:34 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:07:34 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:07:35 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:35 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:35 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:35 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:35 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:35 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:35 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:35 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:35 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:35 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:36 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:36 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:36 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:36 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:36 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:36 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:36 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:36 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:36 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:36 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:37 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:07:37 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:07:37 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:07:37 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:37 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:37 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:37 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:37 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:38 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:38 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:38 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:07:38 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:38 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:38 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:38 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:38 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:38 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:38 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:39 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:39 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:39 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:39 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:39 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:39 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:39 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:39 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:07:39 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:39 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:40 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:40 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:40 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:40 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:07:40 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:40 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:40 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:40 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:41 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:41 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:07:41 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:41 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:41 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:41 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:41 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:41 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:41 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:42 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:07:42 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:07:42 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:42 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:42 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:42 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:42 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:42 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:42 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:42 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:07:43 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:43 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:43 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:43 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:43 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:07:43 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:43 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:07:43 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:43 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:43 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:44 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:44 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:44 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:44 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:07:44 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:44 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:44 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:44 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:44 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:44 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:45 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:45 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:45 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:07:45 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:45 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:07:45 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:45 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:45 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:45 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:07:46 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:46 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:46 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:46 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:07:46 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:46 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:07:46 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:46 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:46 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:47 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:47 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:47 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:07:47 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:47 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:47 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:47 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:47 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:07:47 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:48 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:48 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:07:48 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:48 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:48 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:48 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:48 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:48 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:48 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:07:48 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:07:48 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:48 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:49 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:49 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:49 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:49 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:49 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:49 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:49 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:07:49 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:50 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:07:50 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:50 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:50 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:50 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:50 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:50 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:50 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:50 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:50 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:07:50 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:07:50 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:51 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:07:51 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:51 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:51 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:51 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:51 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:07:51 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:51 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:07:51 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:52 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:52 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:52 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:52 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:52 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:52 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:52 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:52 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:53 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:53 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:07:53 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:53 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:53 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:53 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:53 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:53 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:53 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:53 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:07:53 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:54 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:07:54 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:07:54 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:07:54 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:54 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:54 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:54 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:07:54 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:54 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:07:54 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:54 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:55 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:55 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:55 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:55 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:55 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:55 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:55 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:07:55 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:55 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:07:56 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:07:56 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:56 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:07:56 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:56 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:07:56 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:56 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:56 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:56 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:56 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:57 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:07:57 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:57 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:07:57 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:57 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:57 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:57 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:57 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:58 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:58 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:58 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:58 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:58 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:07:58 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:07:58 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:58 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:58 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:07:58 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:07:59 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:59 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:07:59 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:07:59 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:59 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:07:59 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:07:59 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:07:59 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:07:59 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:08:00 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:00 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:00 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:00 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:08:00 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:00 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:00 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:00 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:00 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:00 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:00 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:01 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:08:01 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:01 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:01 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:01 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:01 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:01 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:01 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:01 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:08:01 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:02 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:02 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:02 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:02 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:02 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:02 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:02 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:02 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:02 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:02 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:03 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:03 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:03 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:03 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:03 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:03 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:08:03 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:08:03 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:08:03 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:03 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:04 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:08:04 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:08:04 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:04 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:04 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:08:04 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:04 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:04 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:04 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:04 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:05 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:05 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:05 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:05 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:05 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:08:05 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:05 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:05 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:05 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:08:06 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:06 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:06 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:06 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:06 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:06 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:06 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:06 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:06 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:08:06 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:06 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:06 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:08:07 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:07 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:07 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:07 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:08:07 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:07 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:07 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:07 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:07 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:08 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:08:08 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:08 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:08 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:08 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:08 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:08 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:08:08 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:08 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:08 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:09 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:08:09 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:08:09 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:09 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:08:09 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:09 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:09 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:09 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:09 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:10 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:08:10 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:10 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:10 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:10 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:10 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:10 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:10 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:08:10 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:11 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:11 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:08:11 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:11 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:11 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:11 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:08:11 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:11 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:11 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:12 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:12 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:12 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:12 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:08:12 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:12 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:12 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:12 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:12 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:08:12 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:13 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:13 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:08:13 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:13 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:13 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:08:13 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:13 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:13 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:13 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:13 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:14 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:14 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:14 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:14 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:14 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:14 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:14 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:08:14 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:08:14 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:08:14 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:14 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:15 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:15 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:15 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:08:15 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:15 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:15 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:08:15 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:15 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:08:15 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:15 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:08:16 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:08:16 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:16 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:16 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:16 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:16 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:08:16 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:16 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:16 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:16 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:17 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:17 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:08:17 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:17 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:17 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:17 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:08:17 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:08:17 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:17 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:18 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:18 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:18 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:08:18 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:18 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:18 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:18 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:18 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:18 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:18 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:19 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:19 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:19 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:19 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:19 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:08:19 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:19 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:19 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:20 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:20 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:20 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:20 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:20 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:20 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:20 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:20 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:08:20 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:20 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:08:21 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:21 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:21 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:21 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:21 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:21 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:21 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:21 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:21 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:21 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:21 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:08:21 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:22 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:08:22 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:22 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:22 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:22 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:22 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:08:22 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:22 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:08:23 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:23 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:23 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:23 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:23 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:23 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:08:23 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:23 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:23 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:23 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:24 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:24 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:24 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:24 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:24 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:24 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:24 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:24 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:08:24 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:24 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:24 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:25 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:25 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:25 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:25 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:08:25 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:25 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:08:25 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:25 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:25 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:25 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:26 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:26 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:26 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:26 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:08:26 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:08:26 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:26 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:26 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:26 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:27 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:27 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:27 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:27 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:27 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:08:27 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:27 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:27 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:27 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:27 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:27 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:28 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:28 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:28 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:28 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:28 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:28 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:08:28 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:28 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:28 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:28 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:29 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:29 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:29 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:29 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:29 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:29 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:08:29 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:29 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:29 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:29 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:08:29 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:30 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:30 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:30 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:08:30 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:30 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:30 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:30 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:08:30 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:30 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:30 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:31 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:31 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:31 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:31 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:08:31 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:31 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:31 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:31 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:31 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:31 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:31 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:08:32 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:32 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:32 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:32 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:32 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:32 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:08:32 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:32 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:32 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:32 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:33 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:33 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:33 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:33 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:08:33 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:33 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:33 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:33 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:33 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:33 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:34 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:34 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:08:34 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:08:34 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:34 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:34 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:34 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:34 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:34 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:08:34 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:08:35 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:35 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:35 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:35 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:08:35 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:35 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:35 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:35 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:35 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:35 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:36 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:36 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:36 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:36 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:36 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:36 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:36 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:36 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:36 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:36 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:08:37 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:37 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:37 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:37 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:37 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:37 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:08:37 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:37 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:37 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:37 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:38 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:38 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:38 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:38 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:38 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:38 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:38 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:38 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:38 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:38 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:38 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:39 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:39 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:40 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:40 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:40 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:40 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:40 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:40 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:40 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:08:40 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:40 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:41 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:41 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:41 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:41 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:08:41 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:08:41 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:41 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:41 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:41 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:41 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:41 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:41 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:42 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:42 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:42 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:42 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:08:42 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:42 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:42 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:42 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:42 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:42 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:43 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:43 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:44 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:44 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:44 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:44 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:44 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:44 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:08:44 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:44 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:08:44 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:44 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:08:45 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:08:45 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:45 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:45 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:08:45 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:45 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:45 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:08:45 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:45 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:45 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:45 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:08:46 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:46 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:08:46 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:46 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:08:46 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:46 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:46 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:46 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:46 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:46 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:08:47 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:47 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:08:47 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:47 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:47 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:08:47 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:47 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:08:47 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:47 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:47 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:47 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:48 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:48 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:48 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:48 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:48 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:48 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:48 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:48 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:48 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:48 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:49 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:49 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:49 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:08:49 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:49 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:49 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:49 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:49 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:49 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:08:49 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:49 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:49 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:50 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:50 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:50 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:50 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:50 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:08:50 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:08:50 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:08:50 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:50 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:08:50 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:51 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:51 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:51 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:51 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:51 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:08:51 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:51 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:51 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:51 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:51 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:51 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:52 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:52 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:52 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:52 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:52 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:52 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:08:52 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:52 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:52 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:52 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:53 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:08:53 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:53 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:53 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:53 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:53 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:53 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:53 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:53 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:53 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:53 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:08:53 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:54 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:08:54 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:08:54 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:08:54 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:08:54 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:54 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:54 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:08:54 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:54 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:54 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:54 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:55 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:55 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:55 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:55 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:55 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:55 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:55 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:55 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:55 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:55 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:56 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:56 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:08:56 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:56 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:56 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:56 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:08:56 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:56 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:56 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:08:56 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:56 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:56 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:57 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:57 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:08:57 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:08:57 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:57 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:57 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:08:57 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:57 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:08:57 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:08:58 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:58 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:58 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:08:58 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:58 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:58 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:58 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:58 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:58 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:58 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:58 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:08:58 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:59 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:59 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:59 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:59 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:08:59 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:08:59 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:59 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:59 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:59 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:08:59 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:08:59 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:00 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:00 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:00 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:00 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:00 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:00 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:00 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:00 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:00 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:00 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:01 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:01 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:01 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:01 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:01 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:01 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:01 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:09:01 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:09:01 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:02 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:02 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:02 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:02 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:02 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:02 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:02 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:02 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:02 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:02 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:02 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:03 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:03 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:03 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:03 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:03 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:03 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:09:03 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:03 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:09:03 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:09:03 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:09:04 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:09:04 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:04 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:04 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:04 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:04 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:04 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:04 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:09:04 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:04 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:04 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:09:05 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:05 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:06 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:09:06 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.178.121 - - [26/Jan/2026:08:09:06 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:06 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:06 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:06 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:06 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:06 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:06 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:06 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:06 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:07 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:07 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:07 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:07 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:07 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:07 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:09:07 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:07 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:07 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:07 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:08 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:09:08 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:08 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:08 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:08 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:08 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:08 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:08 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:08 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:09:08 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:08 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:09 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:09 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:09 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:09 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:09 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:09 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:09 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:09:09 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:09:09 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:09 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:09 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:09 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:10 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:09:10 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:10 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:10 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:10 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:09:10 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:09:10 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:09:10 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:10 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.178.121 - - [26/Jan/2026:08:09:10 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.178.121 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:11 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:09:12 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:12 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:12 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:12 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:12 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:12 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:12 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:09:12 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:09:12 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:12 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:12 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:12 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:13 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:13 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:13 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:13 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:13 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:13 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:13 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:09:13 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:13 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:13 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:13 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:14 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:14 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:14 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:14 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:14 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:09:14 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:14 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:14 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:14 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:14 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:15 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:15 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:15 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:09:15 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:15 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:15 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:09:15 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:15 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:09:15 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:15 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:16 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:16 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:16 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:09:16 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:09:16 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:09:16 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:09:16 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:09:16 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:16 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:16 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:16 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:17 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:17 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:17 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:09:17 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:09:17 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:17 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:17 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:17 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:09:17 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:17 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:17 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.178.121 - - [26/Jan/2026:08:09:18 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:09:18 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:18 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:18 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:18 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:18 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:18 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:09:18 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:18 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:18 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:18 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:19 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:09:19 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:19 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:09:19 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:19 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:19 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:19 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:19 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:19 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:19 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:19 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:20 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:20 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:20 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:20 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:20 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:20 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.178.121 - - [26/Jan/2026:08:09:20 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:09:20 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:20 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:20 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:20 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:09:21 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:21 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:21 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:21 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:09:21 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:21 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:21 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:21 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:21 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:21 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:22 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:09:22 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:22 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:09:22 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:22 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:22 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:22 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:22 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.178.121 - - [26/Jan/2026:08:09:22 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:22 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.178.121 - - [26/Jan/2026:08:09:22 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:09:23 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:23 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:23 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:23 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:23 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.178.121 - - [26/Jan/2026:08:09:23 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:23 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:23 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.86.228 - - [26/Jan/2026:08:09:23 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:23 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:24 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:24 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:09:24 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:24 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:24 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:09:24 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:24 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:24 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:24 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:24 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:09:24 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:24 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.178.121 - - [26/Jan/2026:08:09:25 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:25 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:25 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:25 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:25 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:09:25 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:25 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:25 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:25 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:09:25 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.178.121 - - [26/Jan/2026:08:09:26 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:26 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:27 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:27 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:27 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:27 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:09:27 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:27 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:27 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.178.121 - - [26/Jan/2026:08:09:27 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:27 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:27 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:28 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.178.121 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.178.121 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.178.121 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.86.228 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.178.121 - - [26/Jan/2026:08:09:28 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:28 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:29 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:29 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.86.228 - - [26/Jan/2026:08:09:29 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:29 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:29 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:29 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:29 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:29 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:30 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:30 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:09:30 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:30 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:30 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [26/Jan/2026:08:09:30 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:30 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:30 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:30 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:30 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:09:30 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:31 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:31 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:31 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:31 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:31 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:31 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:31 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:31 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:31 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.86.228 - - [26/Jan/2026:08:09:31 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:32 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.86.228 - - [26/Jan/2026:08:09:32 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [26/Jan/2026:08:09:32 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:09:32 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:32 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:32 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:32 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:32 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:32 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.86.228 - - [26/Jan/2026:08:09:32 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:33 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:33 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:33 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:33 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [26/Jan/2026:08:09:33 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:33 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [26/Jan/2026:08:09:33 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:09:33 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:33 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:33 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:33 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:33 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [26/Jan/2026:08:09:34 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.86.228 - - [26/Jan/2026:08:09:34 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:34 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:34 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:34 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:34 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:34 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.86.228 - - [26/Jan/2026:08:09:34 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:34 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:09:34 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:34 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:35 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:35 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:35 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:35 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:09:35 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:35 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:09:35 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:35 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:35 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:35 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:36 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:36 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:36 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:36 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.86.228 - - [26/Jan/2026:08:09:36 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:36 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.86.228 - - [26/Jan/2026:08:09:36 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:36 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:36 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:36 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:37 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:37 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:37 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.86.228 - - [26/Jan/2026:08:09:37 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:37 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.86.228 - - [26/Jan/2026:08:09:37 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:37 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.86.228 - - [26/Jan/2026:08:09:37 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [26/Jan/2026:08:09:37 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:37 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:38 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.86.228 - - [26/Jan/2026:08:09:38 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:38 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:38 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:38 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.86.228 - - [26/Jan/2026:08:09:38 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:38 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:38 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [26/Jan/2026:08:09:38 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:39 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:39 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:39 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:39 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:39 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:39 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:39 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.170 - - [26/Jan/2026:08:09:39 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:39 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:39 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:39 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.170 - - [26/Jan/2026:08:09:40 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:40 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.64.192.170 - - [26/Jan/2026:08:09:40 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [26/Jan/2026:08:09:40 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.64.192.170 - - [26/Jan/2026:08:09:40 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:40 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.64.192.170 - - [26/Jan/2026:08:09:40 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:40 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.170 - - [26/Jan/2026:08:09:40 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [26/Jan/2026:08:09:41 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:41 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:41 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.170 - - [26/Jan/2026:08:09:41 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:41 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:41 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:41 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:41 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [26/Jan/2026:08:09:41 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:41 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:41 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:41 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [26/Jan/2026:08:09:42 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:42 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:42 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:42 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:42 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.170 - - [26/Jan/2026:08:09:42 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:42 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:42 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:42 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:42 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.64.192.170 - - [26/Jan/2026:08:09:42 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:42 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:43 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:43 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:43 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:43 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:43 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:43 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.170 - - [26/Jan/2026:08:09:43 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:43 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.64.192.170 - - [26/Jan/2026:08:09:43 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:43 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:44 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [26/Jan/2026:08:09:44 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.64.192.170 - - [26/Jan/2026:08:09:44 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:44 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:44 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:44 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:44 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:44 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:44 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:44 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [26/Jan/2026:08:09:45 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:45 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.64.192.52 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.64.192.52 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:46 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:47 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:47 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:47 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:47 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:47 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:47 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:47 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:47 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:47 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:47 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:47 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:48 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:48 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:48 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [26/Jan/2026:08:09:48 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:48 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.90.106 - - [26/Jan/2026:08:09:48 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:48 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:48 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.64.192.52 - - [26/Jan/2026:08:09:48 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:48 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.64.192.52 - - [26/Jan/2026:08:09:48 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:49 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:49 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:49 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.64.192.52 - - [26/Jan/2026:08:09:49 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:49 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.64.192.52 - - [26/Jan/2026:08:09:49 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:49 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:49 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.90.106 - - [26/Jan/2026:08:09:49 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.64.192.52 - - [26/Jan/2026:08:09:49 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:49 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:50 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [26/Jan/2026:08:09:50 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:50 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:50 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:50 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [26/Jan/2026:08:09:50 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:09:50 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:50 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.64.192.52 - - [26/Jan/2026:08:09:50 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.90.106 - - [26/Jan/2026:08:09:50 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:50 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:51 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:51 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [26/Jan/2026:08:09:51 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.90.106 - - [26/Jan/2026:08:09:51 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.64.192.52 - - [26/Jan/2026:08:09:51 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:51 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.64.192.52 - - [26/Jan/2026:08:09:51 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:51 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.64.192.52 - - [26/Jan/2026:08:09:51 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:51 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:51 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:52 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:52 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:52 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:52 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.90.106 - - [26/Jan/2026:08:09:52 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:52 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:52 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.64.192.52 - - [26/Jan/2026:08:09:52 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.90.106 - - [26/Jan/2026:08:09:52 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.64.192.52 - - [26/Jan/2026:08:09:52 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:53 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.64.192.52 - - [26/Jan/2026:08:09:53 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:53 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:53 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [26/Jan/2026:08:09:53 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:53 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:53 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.64.192.52 - - [26/Jan/2026:08:09:53 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:53 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.64.192.52 - - [26/Jan/2026:08:09:53 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:54 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.64.192.52 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:54 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:55 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:55 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:09:55 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:55 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.64.192.52 - - [26/Jan/2026:08:09:55 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:55 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.64.192.52 - - [26/Jan/2026:08:09:55 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [26/Jan/2026:08:09:55 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:55 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:55 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.64.192.52 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.64.192.52 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.64.192.52 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:56 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:56 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.64.192.52 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.64.192.52 - - [26/Jan/2026:08:09:56 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:57 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:58 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:58 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.90.106 - - [26/Jan/2026:08:09:58 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.64.192.52 - - [26/Jan/2026:08:09:58 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.90.106 - - [26/Jan/2026:08:09:58 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:58 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:58 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:58 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:58 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:58 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:58 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:58 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.90.106 - - [26/Jan/2026:08:09:59 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:09:59 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.90.106 - - [26/Jan/2026:08:09:59 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.64.192.52 - - [26/Jan/2026:08:09:59 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:09:59 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.64.192.52 - - [26/Jan/2026:08:09:59 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [26/Jan/2026:08:09:59 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:09:59 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:09:59 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.64.192.52 - - [26/Jan/2026:08:09:59 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.90.106 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:10:00 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:01 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:10:01 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.64.192.52 - - [26/Jan/2026:08:10:01 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.90.106 - - [26/Jan/2026:08:10:01 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.64.192.52 - - [26/Jan/2026:08:10:01 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:10:01 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.64.192.52 - - [26/Jan/2026:08:10:01 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.90.106 - - [26/Jan/2026:08:10:01 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:01 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:10:01 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.64.192.52 - - [26/Jan/2026:08:10:02 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:10:02 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.90.106 - - [26/Jan/2026:08:10:02 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.64.192.52 - - [26/Jan/2026:08:10:02 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:02 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:10:02 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:02 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.90.106 - - [26/Jan/2026:08:10:02 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:02 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:10:03 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:10:03 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:03 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.64.192.52 - - [26/Jan/2026:08:10:03 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:03 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:10:04 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:04 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:04 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.64.192.52 - - [26/Jan/2026:08:10:04 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:04 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:05 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:05 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:05 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:05 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:05 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:05 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.64.192.52 - - [26/Jan/2026:08:10:06 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.64.192.52 - - [26/Jan/2026:08:10:06 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:06 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.64.192.52 - - [26/Jan/2026:08:10:06 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:10:06 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.64.192.52 - - [26/Jan/2026:08:10:07 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:07 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:07 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:07 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.64.192.52 - - [26/Jan/2026:08:10:07 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:10:08 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:08 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.64.192.52 - - [26/Jan/2026:08:10:08 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:08 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:08 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.64.192.52 - - [26/Jan/2026:08:10:09 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:10:09 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:09 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.64.192.52 - - [26/Jan/2026:08:10:09 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:09 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.64.192.52 - - [26/Jan/2026:08:10:10 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.64.192.52 - - [26/Jan/2026:08:10:10 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:10 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:10 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:10 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.64.192.52 - - [26/Jan/2026:08:10:10 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.64.192.52 - - [26/Jan/2026:08:10:11 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:11 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:11 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:11 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:12 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:12 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.64.192.52 - - [26/Jan/2026:08:10:12 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.64.192.52 - - [26/Jan/2026:08:10:12 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:12 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.64.192.52 - - [26/Jan/2026:08:10:13 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.23.166.73 - - [26/Jan/2026:08:18:10 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.71.124.48 - - [26/Jan/2026:08:19:45 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.71.124.48 - - [26/Jan/2026:08:19:50 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.39.198 - - [26/Jan/2026:08:30:45 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.39.180 - - [26/Jan/2026:08:30:46 +0100] "GET /ol.php HTTP/1.1" 301 162 "-" "-" 162.158.39.180 - - [26/Jan/2026:08:30:46 +0100] "GET /sikma.php HTTP/1.1" 301 162 "-" "-" 162.158.39.180 - - [26/Jan/2026:08:30:46 +0100] "GET /rh1.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:47 +0100] "GET /sid3.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:47 +0100] "GET /okxh.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:48 +0100] "GET /krypton.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:48 +0100] "GET /zoo.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:48 +0100] "GET /system/logs/scorpiol.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:49 +0100] "GET /maul.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:49 +0100] "GET /protected/i.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:49 +0100] "GET /ru/adminer/adminer474.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:50 +0100] "GET /download.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:50 +0100] "GET /varb.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:50 +0100] "GET /assets/authorize.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:51 +0100] "GET /tt.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:51 +0100] "GET /a5e0a.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:51 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:52 +0100] "GET /55b76.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:52 +0100] "GET /rzki.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:52 +0100] "GET /acxx.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:53 +0100] "GET /d12.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:53 +0100] "GET /s.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:53 +0100] "GET /error_log.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:54 +0100] "GET /qaez.php56 HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:54 +0100] "GET /dox.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:54 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:55 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:55 +0100] "GET /6kUgr4yGzxN.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:55 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:56 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:56 +0100] "GET /clss.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:56 +0100] "GET /44.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:57 +0100] "GET /ii5file.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:57 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:58 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:58 +0100] "GET /xsas.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:58 +0100] "GET /asus.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:59 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:59 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:30:59 +0100] "GET /domains.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:00 +0100] "GET /wp-goods.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:00 +0100] "GET /144.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:00 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:01 +0100] "GET /vanda.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:01 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:01 +0100] "GET /zc-104.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:02 +0100] "GET /zc-729.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:02 +0100] "GET /bo.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:02 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:03 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:03 +0100] "GET /56c53.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:04 +0100] "GET /FII.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:04 +0100] "GET /wp-ac.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:04 +0100] "GET /atex1.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:05 +0100] "GET /blox.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:05 +0100] "GET /wp-64wscx6shd.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:05 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:06 +0100] "GET /sxx.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:06 +0100] "GET /mode.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:06 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:07 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:07 +0100] "GET /asd.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:07 +0100] "GET /5b9ac.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:08 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:08 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:08 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:09 +0100] "GET /lm15.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:09 +0100] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:09 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:10 +0100] "GET /admin836.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:10 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [26/Jan/2026:08:31:10 +0100] "GET /lufix.php HTTP/1.1" 301 162 "-" "-" 104.23.251.195 - - [26/Jan/2026:09:27:45 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.69.67.8 - - [26/Jan/2026:11:43:05 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 104.23.221.136 - - [26/Jan/2026:12:26:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g" 104.22.1.199 - - [26/Jan/2026:15:05:03 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 172.70.94.172 - - [26/Jan/2026:17:13:08 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.154.85 - - [26/Jan/2026:18:59:40 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (WordPress CMS Scanner)" 172.71.155.5 - - [26/Jan/2026:18:59:41 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (WordPress CMS Scanner)" 104.23.223.111 - - [26/Jan/2026:19:37:21 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 104.23.221.136 - - [26/Jan/2026:19:37:50 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.70.126.44 - - [26/Jan/2026:20:07:32 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 162.158.63.75 - - [26/Jan/2026:20:51:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.63.76 - - [26/Jan/2026:21:41:42 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 162.158.62.91 - - [26/Jan/2026:21:41:42 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 162.158.62.91 - - [26/Jan/2026:21:41:42 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 162.158.62.91 - - [26/Jan/2026:21:41:43 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 162.158.62.91 - - [26/Jan/2026:21:41:43 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 162.158.62.91 - - [26/Jan/2026:21:41:43 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" 162.158.62.91 - - [26/Jan/2026:21:41:43 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.71.184.206 - - [26/Jan/2026:22:45:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.243.28 - - [26/Jan/2026:23:26:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.68.3.28 - - [27/Jan/2026:02:27:17 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.68.3.89 - - [27/Jan/2026:02:27:18 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.3.89 - - [27/Jan/2026:02:27:18 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.68.3.89 - - [27/Jan/2026:02:27:18 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.68.3.89 - - [27/Jan/2026:02:27:18 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.68.3.89 - - [27/Jan/2026:02:27:18 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.68.3.89 - - [27/Jan/2026:02:27:18 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.69.176.90 - - [27/Jan/2026:04:05:57 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.71.124.49 - - [27/Jan/2026:04:06:04 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.22.20.234 - - [27/Jan/2026:04:50:50 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 104.22.20.234 - - [27/Jan/2026:04:50:50 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.23.225.193 - - [27/Jan/2026:05:04:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.70.175.166 - - [27/Jan/2026:05:21:11 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 172.71.184.206 - - [27/Jan/2026:05:27:21 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.164.110 - - [27/Jan/2026:05:27:57 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.159.98.96 - - [27/Jan/2026:07:17:04 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.219.78 - - [27/Jan/2026:07:17:05 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.103.55 - - [27/Jan/2026:07:29:31 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.70.47.96 - - [27/Jan/2026:07:29:31 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.68.12.196 - - [27/Jan/2026:07:44:27 +0100] "GET /txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.12.196 - - [27/Jan/2026:07:44:27 +0100] "GET /wp-content/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.12.196 - - [27/Jan/2026:07:44:27 +0100] "GET /wp-admin/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.87.95 - - [27/Jan/2026:07:50:32 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:35 +0100] "GET /rip.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:36 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:37 +0100] "GET /35.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:38 +0100] "GET /sidfile.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:38 +0100] "GET /rum.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:39 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:40 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:41 +0100] "GET /php8.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:41 +0100] "GET /wp-aoisuki.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:42 +0100] "GET /naritai.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:42 +0100] "GET /w2025.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:43 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:44 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:44 +0100] "GET /geaitasa.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:45 +0100] "GET /class-cc.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:46 +0100] "GET /reze.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:46 +0100] "GET /11092null.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:47 +0100] "GET /ioxi-o2.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:48 +0100] "GET /166.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:48 +0100] "GET /by.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:49 +0100] "GET /zz8.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:49 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:50 +0100] "GET /ah21.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:51 +0100] "GET /ah22.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:51 +0100] "GET /ws38.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:52 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:52 +0100] "GET /uploaxa1.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:53 +0100] "GET /wp-su.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:54 +0100] "GET /rzzaq.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:54 +0100] "GET /abtpn.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:55 +0100] "GET /my1.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:56 +0100] "GET /taktak.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:56 +0100] "GET /sfcl.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:57 +0100] "GET /ypukprhr.php HTTP/1.1" 301 162 "-" "-" 172.69.87.95 - - [27/Jan/2026:07:50:57 +0100] "GET /tcnyz.php HTTP/1.1" 301 162 "-" "-" 104.23.199.167 - - [27/Jan/2026:09:01:11 +0100] "GET / HTTP/1.1" 301 162 "immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.23.223.110 - - [27/Jan/2026:11:31:52 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.223.111 - - [27/Jan/2026:11:33:58 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.175.157 - - [27/Jan/2026:13:06:41 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 162.158.138.239 - - [27/Jan/2026:13:23:16 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.138.199 - - [27/Jan/2026:13:23:18 +0100] "GET /hroxw.php HTTP/1.1" 301 162 "-" "-" 162.158.138.199 - - [27/Jan/2026:13:23:18 +0100] "GET /doti.php HTTP/1.1" 301 162 "-" "-" 162.158.138.199 - - [27/Jan/2026:13:23:18 +0100] "GET /kaza.php HTTP/1.1" 301 162 "-" "-" 162.158.138.199 - - [27/Jan/2026:13:23:19 +0100] "GET /en0.php HTTP/1.1" 301 162 "-" "-" 162.158.138.199 - - [27/Jan/2026:13:23:19 +0100] "GET /opts.php HTTP/1.1" 301 162 "-" "-" 162.158.138.199 - - [27/Jan/2026:13:23:20 +0100] "GET /taff.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:20 +0100] "GET /aghbvr.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:20 +0100] "GET /taktak.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:21 +0100] "GET /enclas.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:21 +0100] "GET /wpo.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:22 +0100] "GET /33.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:22 +0100] "GET /wlex.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:22 +0100] "GET /errorfile.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:23 +0100] "GET /unrcj.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:23 +0100] "GET /rupvs.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:23 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:24 +0100] "GET /mpxct.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:24 +0100] "GET /miuio.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:24 +0100] "GET /miso.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:25 +0100] "GET /nguoj.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:26 +0100] "GET /kzkwq.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:26 +0100] "GET /jbdah.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:27 +0100] "GET /hmcyt.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:27 +0100] "GET /acxx.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:28 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:28 +0100] "GET /akc.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:28 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:29 +0100] "GET /mm.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:29 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:29 +0100] "GET /Angelv2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:30 +0100] "GET /bes.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:30 +0100] "GET /zfile.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:31 +0100] "GET /geger.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:31 +0100] "GET /includes/phpinfo.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:31 +0100] "GET /php_info.php.tmp HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:32 +0100] "GET /phpinfo.php.tmp HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:32 +0100] "GET /info.php.swp HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:33 +0100] "GET /test.php~ HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:33 +0100] "GET /php_info.php~ HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:33 +0100] "GET /info.php~ HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:34 +0100] "GET /info.php.backup HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:34 +0100] "GET /test.php.orig HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:35 +0100] "GET /php_info.php.old HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:35 +0100] "GET /info.php.bak HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:35 +0100] "GET /diagnostic.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:36 +0100] "GET /php_version.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:36 +0100] "GET /wp-content/ova.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:37 +0100] "GET /wp-content/ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:37 +0100] "GET /wp-content/lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:37 +0100] "GET /niett.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:38 +0100] "GET /bs5.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:38 +0100] "GET /codehu.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:38 +0100] "GET /gmanz.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:39 +0100] "GET /za2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:39 +0100] "GET /whm-cp.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:40 +0100] "GET /pu.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:40 +0100] "GET /ppk.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:41 +0100] "GET /assacc.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:41 +0100] "GET /oxse.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:42 +0100] "GET /hanna1337.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:42 +0100] "GET /gt.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:43 +0100] "GET /datab.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:43 +0100] "GET /js/sxx.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:43 +0100] "GET /css/r1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:44 +0100] "GET /rk1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:44 +0100] "GET /mah/xBrain.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:45 +0100] "GET /pegi.PhP8 HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:45 +0100] "GET /alfa-rex1.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:45 +0100] "GET /suck.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:46 +0100] "GET /hikudpno.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:46 +0100] "GET /.tmb/moon.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:47 +0100] "GET /sure.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:47 +0100] "GET /zoo.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:47 +0100] "GET /4563.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:48 +0100] "GET /wunaivpl.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:48 +0100] "GET /reune.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:49 +0100] "GET /dw.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:49 +0100] "GET /ioxi001.PhP7 HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:49 +0100] "GET /shellx.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:50 +0100] "GET /js/l.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:50 +0100] "GET /mode.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:51 +0100] "GET /lnexugel.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:51 +0100] "GET /online.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:52 +0100] "GET /up-kon.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:52 +0100] "GET /word.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:53 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:53 +0100] "GET /jcsonquo.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:53 +0100] "GET /termps.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:54 +0100] "GET /rc.php7 HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:55 +0100] "GET /indo.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:55 +0100] "GET /rin.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:56 +0100] "GET /packages.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:56 +0100] "GET /ioxi.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:57 +0100] "GET /vbv.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:57 +0100] "GET /mk.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:58 +0100] "GET /moderation.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:58 +0100] "GET /simple-shell.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:58 +0100] "GET /js/dist/vendor/about.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:23:59 +0100] "GET /2Vu80QG.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:00 +0100] "GET /bsr.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:00 +0100] "GET /ans.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:00 +0100] "GET /wp-tot.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:01 +0100] "GET /Core-wp.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:01 +0100] "GET /src.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:01 +0100] "GET /pomo/v2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:02 +0100] "GET /nxd.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:02 +0100] "GET /payout.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:02 +0100] "GET /uxquidwa.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:03 +0100] "GET /combined.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:03 +0100] "GET /mari.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:03 +0100] "GET /kodox.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:04 +0100] "GET /ak47shell.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:04 +0100] "GET /ok.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:05 +0100] "GET /log404.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:05 +0100] "GET /wh.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:05 +0100] "GET /luf.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:06 +0100] "GET /bs2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:06 +0100] "GET /wf.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:06 +0100] "GET /vcard.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:07 +0100] "GET /wp-content/file2.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:08 +0100] "GET /ddgg.php HTTP/1.1" 301 162 "-" "-" 162.158.138.239 - - [27/Jan/2026:13:24:08 +0100] "GET /rc.php7 HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:08 +0100] "GET /indo.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:09 +0100] "GET /pu.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:09 +0100] "GET /docs.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:10 +0100] "GET /js/cache.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:10 +0100] "GET /gaza.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:11 +0100] "GET /XX.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:11 +0100] "GET /fm.php/sts.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:11 +0100] "GET /.tmb/cloud.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:12 +0100] "GET /owlmailer.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:12 +0100] "GET /F0x.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:12 +0100] "GET /rlpc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:13 +0100] "GET /wp-p.php7 HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:13 +0100] "GET /sale.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:14 +0100] "GET /ran.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:14 +0100] "GET /k90.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:15 +0100] "GET /taff.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:15 +0100] "GET /set.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:15 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:16 +0100] "GET /ssxsl.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:16 +0100] "GET /AE5VAL.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:16 +0100] "GET /gold.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:17 +0100] "GET /gely.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:17 +0100] "GET /xBrain.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:17 +0100] "GET /sagafif.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:18 +0100] "GET /wp-trc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:18 +0100] "GET /tesla1.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:19 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:19 +0100] "GET /pomo/l.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:20 +0100] "GET /ase.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:20 +0100] "GET /ktgob.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:20 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:21 +0100] "GET /afile.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:21 +0100] "GET /xBrain.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:21 +0100] "GET /yunu.php HTTP/1.1" 301 162 "-" "-" 141.101.84.237 - - [27/Jan/2026:13:24:22 +0100] "GET /lexy.php HTTP/1.1" 301 162 "-" "-" 172.70.94.173 - - [27/Jan/2026:15:27:26 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.90.61 - - [27/Jan/2026:15:37:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 141.101.84.236 - - [27/Jan/2026:18:44:04 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:07 +0100] "GET /wp-freya.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:08 +0100] "GET /ea.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:09 +0100] "GET /gi.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:09 +0100] "GET /nov.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:09 +0100] "GET /xo.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:10 +0100] "GET /555.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:10 +0100] "GET /anskrit.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:10 +0100] "GET /win.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:11 +0100] "GET /ut.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:11 +0100] "GET /ooaiyc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:11 +0100] "GET /nx1.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:12 +0100] "GET /avtst.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:12 +0100] "GET /inde.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:12 +0100] "GET /classgoto24.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:13 +0100] "GET /lx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:13 +0100] "GET /die.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:20 +0100] "GET /aaaa.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:21 +0100] "GET /bbbb.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:21 +0100] "GET /cccc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:21 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:22 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:22 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:22 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:23 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:23 +0100] "GET /file32.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:23 +0100] "GET /filesss.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:24 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:24 +0100] "GET /file13.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:24 +0100] "GET /file3.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:25 +0100] "GET /3406.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:25 +0100] "GET /963e.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:26 +0100] "GET /hk.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:26 +0100] "GET /cjfuns.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:27 +0100] "GET /akk.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:27 +0100] "GET /alpa.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:27 +0100] "GET /rrr.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:28 +0100] "GET /vee.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:29 +0100] "GET /0x0x.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:29 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:29 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:30 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:31 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:32 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:33 +0100] "GET /shell1.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:33 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:34 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:34 +0100] "GET /hexx.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:35 +0100] "GET /444.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:35 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:35 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:36 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:37 +0100] "GET /222.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:37 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:37 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:38 +0100] "GET /zfile.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:38 +0100] "GET /conflg.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:39 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:39 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:40 +0100] "GET /cache.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:41 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:41 +0100] "GET /406.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:41 +0100] "GET /r.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:42 +0100] "GET /wp-info.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:42 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:43 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:44 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:44 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:45 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:45 +0100] "GET /lc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:45 +0100] "GET /inputs.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:46 +0100] "GET /asas.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:46 +0100] "GET /rk2.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:47 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:47 +0100] "GET /makeasmtp.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:47 +0100] "GET /wp-aespa.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:48 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:49 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:49 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:49 +0100] "GET /11.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:49 +0100] "GET /fm.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:50 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:50 +0100] "GET /xmrlpc.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:51 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:51 +0100] "GET /js.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:52 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:52 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:53 +0100] "GET /oivcl.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:53 +0100] "GET /nwwha.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:53 +0100] "GET /jvcpa.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:54 +0100] "GET /lddxs.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:54 +0100] "GET //1337.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:54 +0100] "GET /wp-miiss.php.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:55 +0100] "GET //web.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:55 +0100] "GET //elp.php?p= HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:56 +0100] "GET //index/function.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:56 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:56 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:57 +0100] "GET /w-1.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:57 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:58 +0100] "GET //buy.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:58 +0100] "GET //doc.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:59 +0100] "GET //x.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:59 +0100] "GET /wp-widgets.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:44:59 +0100] "GET /wpupex.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:00 +0100] "GET /first.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:00 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:00 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:01 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:01 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:01 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:02 +0100] "GET /f6.php HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:02 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:03 +0100] "GET /wp-content/cache/ HTTP/1.1" 301 162 "-" "-" 141.101.84.236 - - [27/Jan/2026:18:45:03 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "-" 162.158.162.96 - - [27/Jan/2026:18:45:52 +0100] "GET /sftp-config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.190.33 - - [27/Jan/2026:18:46:01 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.164.110 - - [27/Jan/2026:20:17:25 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.71.184.207 - - [27/Jan/2026:20:20:14 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.221.136 - - [27/Jan/2026:21:21:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g" 172.68.245.187 - - [27/Jan/2026:22:00:06 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.68.245.165 - - [27/Jan/2026:22:00:06 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.68.245.165 - - [27/Jan/2026:22:00:06 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.68.245.165 - - [27/Jan/2026:22:00:06 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.68.245.165 - - [27/Jan/2026:22:00:07 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.68.245.165 - - [27/Jan/2026:22:00:07 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.68.245.165 - - [27/Jan/2026:22:00:07 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.68.10.40 - - [27/Jan/2026:22:40:20 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.69.6.190 - - [28/Jan/2026:01:35:25 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.69.7.189 - - [28/Jan/2026:01:35:25 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.69.7.189 - - [28/Jan/2026:01:35:25 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.69.7.189 - - [28/Jan/2026:01:35:25 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.69.7.189 - - [28/Jan/2026:01:35:26 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.69.7.189 - - [28/Jan/2026:01:35:26 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.69.7.189 - - [28/Jan/2026:01:35:26 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 104.22.24.143 - - [28/Jan/2026:07:55:56 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.238.113 - - [28/Jan/2026:07:55:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.245.176 - - [28/Jan/2026:07:56:11 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.245.11 - - [28/Jan/2026:07:56:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.150.137 - - [28/Jan/2026:08:49:20 +0100] "GET /.env HTTP/1.1" 301 162 "-" "-" 162.158.42.75 - - [28/Jan/2026:08:59:28 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.147.174 - - [28/Jan/2026:09:03:13 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.23.217.47 - - [28/Jan/2026:11:36:45 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.217.46 - - [28/Jan/2026:11:39:51 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.190.193 - - [28/Jan/2026:12:33:15 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.90.61 - - [28/Jan/2026:12:53:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.80 - - [28/Jan/2026:13:10:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.222.86 - - [28/Jan/2026:13:10:12 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 162.158.6.151 - - [28/Jan/2026:13:26:36 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:39 +0100] "GET /rip.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:39 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:39 +0100] "GET /35.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:40 +0100] "GET /sidfile.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:40 +0100] "GET /rum.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:41 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:41 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:41 +0100] "GET /php8.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:42 +0100] "GET /wp-aoisuki.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:42 +0100] "GET /naritai.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:43 +0100] "GET /w2025.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:43 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:44 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:44 +0100] "GET /geaitasa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:44 +0100] "GET /class-cc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:45 +0100] "GET /reze.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:45 +0100] "GET /11092null.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:46 +0100] "GET /ioxi-o2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:46 +0100] "GET /166.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:46 +0100] "GET /by.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:47 +0100] "GET /zz8.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:47 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:48 +0100] "GET /ah21.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:48 +0100] "GET /ah22.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:48 +0100] "GET /ws38.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:49 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:49 +0100] "GET /uploaxa1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:50 +0100] "GET /wp-su.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:50 +0100] "GET /rzzaq.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:50 +0100] "GET /abtpn.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:51 +0100] "GET /my1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:51 +0100] "GET /taktak.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:52 +0100] "GET /sfcl.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:52 +0100] "GET /ypukprhr.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [28/Jan/2026:13:26:53 +0100] "GET /tcnyz.php HTTP/1.1" 301 162 "-" "-" 172.70.35.121 - - [28/Jan/2026:14:10:55 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.110.130 - - [28/Jan/2026:14:26:01 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:02 +0100] "GET //autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:02 +0100] "GET //alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:03 +0100] "GET //wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:03 +0100] "GET /luxe.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:03 +0100] "GET /update/wpupex.php/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:04 +0100] "GET /rezor.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:04 +0100] "GET //doc.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:05 +0100] "GET //wp-admin/user/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:05 +0100] "GET //wp-includes/css/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:05 +0100] "GET //install.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:06 +0100] "GET /~norapump/hah.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:06 +0100] "GET /sto.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:06 +0100] "GET //x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:07 +0100] "GET //test.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:07 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:07 +0100] "GET /n3.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:08 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:08 +0100] "GET /o.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:09 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:09 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:09 +0100] "GET /.trash7309/f/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:10 +0100] "GET //wp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:10 +0100] "GET //wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:10 +0100] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:11 +0100] "GET //h.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:11 +0100] "GET //skin/install/default/security.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:11 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:12 +0100] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:12 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:12 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:13 +0100] "GET /png.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:13 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:14 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:14 +0100] "GET //wp-content/languages/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:14 +0100] "GET //wp-content/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:15 +0100] "GET /wp/wp-includes//index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:15 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:16 +0100] "GET //wso.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:16 +0100] "GET /images/fk2e3/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:17 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:17 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:17 +0100] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:18 +0100] "GET /sxo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:18 +0100] "GET //admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:18 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:19 +0100] "GET //wp-content/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:19 +0100] "GET /mans.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:20 +0100] "GET //dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:20 +0100] "GET /WordPress/x/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:20 +0100] "GET /ze.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:21 +0100] "GET //geck.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:21 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:22 +0100] "GET //admin/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:22 +0100] "GET //index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:22 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:23 +0100] "GET /ftp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:23 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:23 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:24 +0100] "GET //wp-admin/class-db.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:25 +0100] "GET /cool.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:25 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:25 +0100] "GET //simple.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:26 +0100] "GET //elp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:26 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:27 +0100] "GET //wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:28 +0100] "GET //inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:28 +0100] "GET /.trash7309/fafa/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:29 +0100] "GET /system.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:29 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:29 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:30 +0100] "GET /museu/yhweq.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:30 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:31 +0100] "GET //w.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:31 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:31 +0100] "GET /gib.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:32 +0100] "GET /wp-miiss.php.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:32 +0100] "GET /ho/wpup.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:33 +0100] "GET //moon.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:33 +0100] "GET /filesss.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:34 +0100] "GET /hey.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:34 +0100] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:34 +0100] "GET //1337.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:35 +0100] "GET //buy.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:35 +0100] "GET /apsarasarts/okk.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:35 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:36 +0100] "GET /wp-is.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:36 +0100] "GET /jmfi2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:37 +0100] "GET //about/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:37 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:38 +0100] "GET //wp-content/json.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:38 +0100] "GET /hzz.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:39 +0100] "GET //shell20211028.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:39 +0100] "GET //content.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:39 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:40 +0100] "GET /ps.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:40 +0100] "GET //wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:41 +0100] "GET /.trash7309/dd/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:41 +0100] "GET /cache.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:41 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:42 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:42 +0100] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:42 +0100] "GET //user.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:43 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:44 +0100] "GET //index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:44 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:44 +0100] "GET /rip.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:45 +0100] "GET /wp4.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:45 +0100] "GET //403.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:45 +0100] "GET //wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:46 +0100] "GET /asd67.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:46 +0100] "GET //sad/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:47 +0100] "GET /oivcl.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:47 +0100] "GET //about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:47 +0100] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:48 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:48 +0100] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:49 +0100] "GET /x/ HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:49 +0100] "GET //.cache/x.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:49 +0100] "GET /dr.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:50 +0100] "GET /raw.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:50 +0100] "GET //wp-includes/css/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:51 +0100] "GET //wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:51 +0100] "GET /ioxi-o2.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:52 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:52 +0100] "GET /dlu.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:53 +0100] "GET //wp-content/about.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:53 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:53 +0100] "GET /packed.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:54 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:54 +0100] "GET //404.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:54 +0100] "GET /des.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:55 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "-" 172.71.110.130 - - [28/Jan/2026:14:26:55 +0100] "GET //lufix.php HTTP/1.1" 301 162 "-" "-" 104.22.1.199 - - [28/Jan/2026:14:30:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.23.29 - - [28/Jan/2026:14:30:55 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.11.120 - - [28/Jan/2026:14:40:26 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.31.173 - - [28/Jan/2026:15:10:57 +0100] "GET /index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.94.124 - - [28/Jan/2026:15:21:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 104.23.166.72 - - [28/Jan/2026:18:17:33 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.223.110 - - [28/Jan/2026:19:24:14 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 172.68.2.76 - - [28/Jan/2026:21:18:26 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.68.3.63 - - [28/Jan/2026:21:18:26 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.3.63 - - [28/Jan/2026:21:18:26 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.68.3.63 - - [28/Jan/2026:21:18:26 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.68.3.63 - - [28/Jan/2026:21:18:26 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.3.63 - - [28/Jan/2026:21:18:26 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.68.3.63 - - [28/Jan/2026:21:18:27 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.68.22.142 - - [28/Jan/2026:21:31:21 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 108.162.246.117 - - [28/Jan/2026:21:34:16 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.23.223.110 - - [28/Jan/2026:22:21:43 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 172.71.184.206 - - [28/Jan/2026:22:39:48 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.159.98.61 - - [28/Jan/2026:22:53:05 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 104.23.209.46 - - [28/Jan/2026:23:43:55 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 104.23.209.46 - - [28/Jan/2026:23:43:55 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.209.46 - - [28/Jan/2026:23:43:56 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 104.23.209.46 - - [28/Jan/2026:23:43:56 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 104.23.209.46 - - [28/Jan/2026:23:43:56 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 104.23.209.46 - - [28/Jan/2026:23:43:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 104.23.209.46 - - [28/Jan/2026:23:43:56 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 104.23.166.73 - - [29/Jan/2026:06:14:47 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 172.71.203.53 - - [29/Jan/2026:08:09:46 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.158.63.197 - - [29/Jan/2026:08:09:46 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://www.immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.23.221.137 - - [29/Jan/2026:08:29:56 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.221.137 - - [29/Jan/2026:08:30:01 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.170.70 - - [29/Jan/2026:09:00:35 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.103.106 - - [29/Jan/2026:09:00:41 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.221.136 - - [29/Jan/2026:15:48:31 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.217.47 - - [29/Jan/2026:15:49:58 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.243.164 - - [29/Jan/2026:20:01:29 +0100] "GET / HTTP/1.1" 301 162 "-" "air.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 172.68.3.126 - - [29/Jan/2026:20:28:53 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.68.3.126 - - [29/Jan/2026:20:28:54 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.68.3.126 - - [29/Jan/2026:20:28:54 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.68.3.126 - - [29/Jan/2026:20:28:54 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.68.3.126 - - [29/Jan/2026:20:28:54 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.68.3.126 - - [29/Jan/2026:20:28:54 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.68.3.126 - - [29/Jan/2026:20:28:54 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.70.42.163 - - [29/Jan/2026:21:25:48 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 162.158.152.183 - - [29/Jan/2026:21:25:48 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 162.158.152.183 - - [29/Jan/2026:21:25:49 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 162.158.152.183 - - [29/Jan/2026:21:25:49 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 162.158.152.183 - - [29/Jan/2026:21:25:49 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 162.158.152.183 - - [29/Jan/2026:21:25:49 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 162.158.152.183 - - [29/Jan/2026:21:25:49 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:38 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:38 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.34 - - [29/Jan/2026:22:01:38 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.34 - - [29/Jan/2026:22:01:39 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.34 - - [29/Jan/2026:22:01:39 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.34 - - [29/Jan/2026:22:01:39 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.34 - - [29/Jan/2026:22:01:39 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:40 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.34 - - [29/Jan/2026:22:01:40 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.34 - - [29/Jan/2026:22:01:40 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.114 - - [29/Jan/2026:22:01:40 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.34 - - [29/Jan/2026:22:01:40 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.114 - - [29/Jan/2026:22:01:40 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.34 - - [29/Jan/2026:22:01:41 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.114 - - [29/Jan/2026:22:01:41 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:01:41 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.114 - - [29/Jan/2026:22:01:41 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:01:41 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.114 - - [29/Jan/2026:22:01:41 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:01:41 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:42 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.114 - - [29/Jan/2026:22:01:42 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:42 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.114 - - [29/Jan/2026:22:01:42 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:01:42 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.114 - - [29/Jan/2026:22:01:42 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:01:42 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.114 - - [29/Jan/2026:22:01:43 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:43 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:43 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.114 - - [29/Jan/2026:22:01:43 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:43 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.114 - - [29/Jan/2026:22:01:43 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:01:43 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.114 - - [29/Jan/2026:22:01:43 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:44 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:01:44 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.114 - - [29/Jan/2026:22:01:44 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:44 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.114 - - [29/Jan/2026:22:01:44 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:01:44 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.114 - - [29/Jan/2026:22:01:44 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:01:44 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.114 - - [29/Jan/2026:22:01:45 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:45 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:45 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:45 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:45 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:45 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:45 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:01:45 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:46 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:46 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:46 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:01:46 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:01:46 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:01:46 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:46 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:01:46 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:01:47 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:47 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:01:47 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:47 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:01:47 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:47 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:47 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:47 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:47 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:48 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:48 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:48 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:48 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:01:48 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:48 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:48 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:01:48 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:01:49 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:01:49 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:49 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:49 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:49 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:49 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:49 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:49 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:50 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:01:50 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:50 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:50 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:01:50 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:50 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:50 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:50 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:51 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:01:51 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:51 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:51 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:01:51 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:51 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:51 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:51 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:01:52 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:52 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:01:52 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:52 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:01:52 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:52 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:52 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:52 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:01:53 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:53 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:53 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:53 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:53 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:53 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:53 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:53 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:54 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:54 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:54 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:54 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:54 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:54 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:54 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:01:54 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:01:55 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:01:55 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:01:55 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:01:55 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:55 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:55 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:55 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:01:55 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:56 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:01:56 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:01:56 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:56 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:01:56 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:01:56 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:56 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:56 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:01:56 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:57 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:01:57 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:57 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:01:57 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:01:57 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:01:57 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:57 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:57 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:58 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:01:58 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:58 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:01:58 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:58 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:01:58 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:58 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:01:58 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:58 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:01:59 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:01:59 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:01:59 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:01:59 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:01:59 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:01:59 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:01:59 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:01:59 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:00 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:00 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:00 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:02:00 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:00 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:00 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:00 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:00 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:01 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:01 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:01 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:02:01 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:02:01 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:02 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:02:02 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:02 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:02 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:02 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:02 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:02 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:02 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:03 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:03 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:03 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:02:03 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:02:03 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:03 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:03 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:03 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:04 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:04 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:02:04 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:02:04 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:04 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:04 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:04 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:04 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:02:05 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:05 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:05 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:05 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:05 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:05 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:05 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:05 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:02:06 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:06 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:02:06 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:06 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:06 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:06 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:06 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:06 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:07 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:07 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:07 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:07 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:07 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:02:07 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:02:07 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:07 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:02:07 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:07 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:08 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:08 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:08 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:08 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:08 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:08 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:08 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:08 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:09 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:09 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:09 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:09 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:09 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:09 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:02:09 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:09 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:10 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:02:10 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:02:10 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:02:10 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:10 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:10 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:10 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:02:10 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:02:10 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:11 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:11 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:11 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:11 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:11 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:11 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:11 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:11 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:11 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:02:12 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:12 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:12 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:12 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:12 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:12 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:12 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:12 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:02:13 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:02:13 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:13 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:13 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:13 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:02:13 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:13 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:02:13 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:13 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:14 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:14 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:02:14 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:14 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:14 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:14 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:14 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:14 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:15 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:15 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:15 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:15 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:15 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:15 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:15 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:15 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:02:16 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:02:16 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:16 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:02:16 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:16 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:16 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:16 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:16 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:17 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:02:17 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:17 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:17 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:17 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:17 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:17 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:17 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:18 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:18 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:18 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:18 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:18 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:18 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:18 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:18 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:18 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:19 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:19 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:19 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:19 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:19 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:02:19 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:19 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:19 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:19 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:02:20 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:20 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:20 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:02:20 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:20 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:02:20 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:20 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:20 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:21 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:02:21 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:21 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:21 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:21 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:21 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:21 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:21 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:21 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:21 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:02:22 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:22 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:22 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:02:22 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:22 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:22 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:02:22 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:22 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:23 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:23 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:23 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:02:23 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:23 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:23 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:23 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:23 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:23 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:02:24 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:24 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:24 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:24 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:24 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:24 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:24 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:02:24 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:24 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:02:25 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:25 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:25 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:25 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:25 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:25 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:25 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:25 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:25 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:26 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:26 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:26 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:26 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:26 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:26 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:26 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:26 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:26 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:27 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:27 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:27 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:27 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:27 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:27 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:27 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:27 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:02:27 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:02:28 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:28 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:28 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:02:28 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:02:28 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:28 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:28 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:28 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:28 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:29 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:29 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:29 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:29 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:02:29 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:29 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:02:29 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:29 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:02:29 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:30 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:02:30 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:30 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:30 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:30 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:02:30 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:30 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:31 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:31 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:31 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:31 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:31 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:31 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:31 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:31 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:31 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:32 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:32 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:32 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:32 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:32 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:32 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:32 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:32 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:32 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:33 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:33 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:33 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:02:33 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:33 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:33 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:02:33 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:33 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:33 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:02:34 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:34 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:34 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:02:34 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:34 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:34 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:34 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:34 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:35 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:35 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:35 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:35 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:35 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:35 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:35 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:35 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:35 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:36 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:36 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:36 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:36 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:36 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:36 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:36 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:02:36 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:37 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:37 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:37 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:37 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:37 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:37 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:37 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:37 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:37 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:02:38 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:38 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:38 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:38 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:38 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:38 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:38 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:38 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:38 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:02:39 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:39 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:02:39 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:39 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:02:39 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:39 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:39 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:39 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:02:40 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:40 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:40 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:40 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:40 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:02:40 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:40 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:40 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:02:40 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:02:40 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:02:41 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:41 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:41 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:41 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:41 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:41 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:41 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:41 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:42 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:42 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:42 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:42 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:42 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:42 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:42 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:42 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:43 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:43 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:43 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:43 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:43 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:02:43 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:43 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:43 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:43 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:44 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:02:44 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:44 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:44 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:44 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:44 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:44 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:44 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:45 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:45 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:02:45 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:45 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:02:45 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:45 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:45 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:45 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:45 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:46 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:46 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:46 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:46 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:46 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:02:46 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:02:46 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:46 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:47 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:47 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:47 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:47 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:02:47 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:02:47 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:47 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:47 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:48 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:48 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:48 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:48 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:48 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:48 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:48 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:48 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:48 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:49 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:02:49 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:49 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:49 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:49 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:49 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:49 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:49 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:50 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:02:50 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:02:50 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:50 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:50 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:02:50 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:50 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:50 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:02:50 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:51 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:51 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:51 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:51 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:02:51 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:51 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:51 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:51 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:51 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:52 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:52 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:52 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:02:52 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:52 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:52 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:52 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:52 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:53 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:53 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:53 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:02:53 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:53 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:53 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:53 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:02:53 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:53 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:53 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:54 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:02:54 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:54 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:54 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:02:54 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:54 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:54 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:54 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:02:55 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:55 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:55 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:55 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:55 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:02:55 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:55 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:55 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:56 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:56 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:56 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:56 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:02:56 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:56 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:56 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:02:56 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:56 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:56 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:57 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:57 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:57 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:02:57 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:57 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:57 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:57 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:02:57 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:58 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:02:58 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:58 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:58 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:02:58 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:58 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:02:58 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:02:58 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:02:58 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:59 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:59 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:59 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:02:59 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:02:59 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:02:59 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:59 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:02:59 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:02:59 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:00 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:00 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:00 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:00 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:00 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:00 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:00 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:00 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:01 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:01 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:01 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:01 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:03:01 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:01 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:03:01 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:01 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:02 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:02 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:03:02 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:03:02 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:02 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:03:02 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:02 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:02 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:03:02 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:03:02 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:03 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:03 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:03 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:03 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:03 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:03 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:03:03 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:03 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:04 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:04 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:04 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:04 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:04 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:04 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:03:04 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:04 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:04 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:05 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:05 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:05 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:05 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:05 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:05 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:05 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:05 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:05 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:06 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:06 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:06 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:06 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:06 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:06 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:03:06 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:06 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:06 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:06 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:07 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:07 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:07 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:07 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:07 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:07 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:07 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:07 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:07 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:08 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:08 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:08 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:08 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:08 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:03:08 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:03:08 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:08 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:09 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:03:09 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:09 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:09 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:09 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:09 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:09 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:09 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:09 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:09 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:03:10 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:10 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:10 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:10 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:10 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:10 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:03:10 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:10 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:11 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:11 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:11 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:11 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:11 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:11 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:11 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:11 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:11 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:12 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:12 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:03:12 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:12 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:03:12 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:12 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:12 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:12 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:12 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:13 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:13 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:13 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:13 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:13 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:13 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:13 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:03:13 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:14 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:14 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:14 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:03:14 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:03:14 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:14 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:03:14 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:14 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:14 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:15 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:03:15 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:15 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:15 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:15 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:15 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:15 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:15 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:15 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:16 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:16 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:16 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:16 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:16 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:16 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:16 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:16 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:17 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:17 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:17 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:17 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:03:17 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:17 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:03:17 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:03:17 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:17 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:17 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:18 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:18 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:03:18 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:18 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:18 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:18 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:18 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:18 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:19 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:03:19 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:19 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:19 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:19 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:19 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:19 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:19 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:03:19 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:19 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:20 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:20 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:20 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:20 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:03:20 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:03:20 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:03:20 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:20 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:20 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:21 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:21 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:03:21 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:03:21 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:21 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:21 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:21 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:21 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:21 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:03:22 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:22 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:22 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:22 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:22 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:22 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:22 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:22 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:23 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:23 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:23 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:23 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:23 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:23 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:23 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:23 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:23 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:24 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:03:24 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:03:24 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:24 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:24 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:24 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:24 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:24 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:03:24 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:25 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:25 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:25 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:25 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:25 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:25 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:03:25 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:25 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:25 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:26 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:26 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:26 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:03:26 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:26 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:26 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:26 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:26 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:03:26 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:03:26 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:03:27 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:27 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:27 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:03:27 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:27 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:27 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:27 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:27 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:27 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:28 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:28 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:03:28 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:28 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:03:28 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:28 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:03:28 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:28 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:28 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:29 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:29 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:03:29 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:29 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:03:29 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:03:29 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:29 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:03:29 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:30 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:03:30 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:30 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:30 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:30 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:30 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:30 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:31 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:31 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:03:31 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:31 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:31 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:03:31 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:31 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:03:31 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:03:32 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:03:32 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:03:32 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:32 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:32 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:32 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:32 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:32 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:33 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:33 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:33 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:03:33 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:03:33 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:33 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:33 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:03:33 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:03:33 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:34 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:34 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:03:34 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:34 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:34 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:03:34 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:34 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:34 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:34 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:35 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:03:35 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:35 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:35 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:35 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:35 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:03:35 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:35 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:03:36 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:36 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:03:36 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:03:36 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:36 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:36 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:03:36 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:36 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:36 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:36 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:37 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:37 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:37 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:03:37 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:37 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:03:37 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:03:37 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:37 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:38 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:38 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:38 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:38 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:38 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:38 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:38 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:38 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:03:39 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:39 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:39 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:39 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:39 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:03:39 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:39 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:39 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:03:39 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:39 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:03:40 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:03:40 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:40 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:40 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:40 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:40 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:40 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:40 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:41 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:03:41 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:41 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:41 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:41 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:41 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:41 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:41 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:41 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:42 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:42 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:42 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:03:42 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:42 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:42 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:42 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:03:42 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:43 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:43 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:43 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:43 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:43 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:03:43 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:43 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:43 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:44 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:03:44 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:44 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:44 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:44 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:44 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:44 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:44 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:44 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:03:45 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:03:45 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:45 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:03:45 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:45 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:45 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:45 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:45 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:46 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:03:46 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:46 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:46 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:03:46 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:46 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:46 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:46 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:46 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:03:47 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:47 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:47 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:47 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:47 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:47 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:47 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:47 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:48 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:48 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:48 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:48 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:48 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:48 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:48 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:03:48 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:49 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:49 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:49 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:49 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:49 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:03:49 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:49 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:03:49 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:49 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:49 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:03:50 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:50 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:50 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:50 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:50 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:50 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:50 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:03:50 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:03:51 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:51 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:51 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:03:51 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:51 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:51 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:03:51 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:51 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:52 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:52 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:52 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:52 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:52 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:52 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:52 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:03:52 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:52 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:52 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:03:53 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:53 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:53 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:53 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:03:53 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:53 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:03:53 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:53 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:03:54 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:03:54 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:03:54 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:54 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:03:54 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:54 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:54 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:03:54 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:54 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:03:55 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:55 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:55 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:03:55 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:55 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:03:55 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:03:55 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:03:55 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:03:55 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:56 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:03:56 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:56 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:56 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:56 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:56 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:56 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:56 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:57 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:57 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:57 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:57 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:03:57 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:57 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:57 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:57 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:03:57 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:58 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:58 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:58 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:03:58 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:58 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:58 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:58 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:03:58 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:59 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:59 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:03:59 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:59 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:03:59 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:03:59 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:03:59 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:03:59 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:03:59 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:00 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:00 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:00 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:00 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:00 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:04:00 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:00 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:00 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:01 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:01 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:01 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:01 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:01 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:01 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:01 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:01 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:02 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:04:02 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:02 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:02 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:02 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:02 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:02 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:02 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:04:03 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:03 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:04:03 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:04:03 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:03 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:04:03 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:03 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:03 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:03 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:04 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:04 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:04 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:04 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:04 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:04:04 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:04 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:04:04 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:05 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:05 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:05 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:05 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:05 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:05 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:05 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:05 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:06 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:06 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:06 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:06 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:06 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:06 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:06 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:06 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:04:06 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:04:07 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:07 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:07 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:07 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:07 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:07 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:04:07 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:08 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:08 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:08 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:08 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:08 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:04:08 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:04:08 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:08 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:08 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:08 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:04:09 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:09 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:04:09 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:09 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:09 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:09 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:04:09 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:09 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:10 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:10 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:10 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:10 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:04:10 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:10 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:10 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:04:10 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:11 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:11 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:11 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:11 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:04:11 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:04:11 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:11 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:04:11 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:12 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:04:12 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:12 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:12 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:12 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:12 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:12 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:12 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:04:13 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:04:13 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:13 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:13 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:04:13 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:13 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:13 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:04:13 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:14 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:14 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:14 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:04:14 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:14 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:14 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:14 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:14 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:15 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:15 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:15 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:04:15 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:15 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:15 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:15 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:15 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:15 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:16 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:16 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:16 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:04:16 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:16 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:16 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:16 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:16 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:04:17 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:17 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:04:17 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:17 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:17 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:17 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:17 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:17 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:04:18 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:18 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:04:18 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:18 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:18 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:18 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:18 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:04:18 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:19 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:19 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:19 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:04:19 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:19 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:19 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:19 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:04:19 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:04:20 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:20 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:20 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:04:20 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:20 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:04:20 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:20 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:20 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:21 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:21 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:04:21 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:21 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:04:21 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:21 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:21 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:21 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:22 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:22 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:22 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:22 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:22 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:22 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:22 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:22 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:23 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:04:23 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:23 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:23 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:23 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:23 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:23 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:04:24 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:04:24 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:24 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:04:24 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:24 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:04:24 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:24 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:24 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:24 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:25 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:25 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:04:25 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:04:25 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:25 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:25 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:25 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:26 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:26 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:26 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:04:26 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:26 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:26 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:26 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:26 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:27 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:27 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:27 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:04:27 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:04:27 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:27 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:27 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:27 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:28 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:28 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:28 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:28 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:04:28 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:04:28 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:28 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:28 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:29 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:29 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:29 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:29 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:29 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:29 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:29 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:04:30 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:30 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:04:30 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:30 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:30 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:30 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:30 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:30 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:04:31 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:31 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:31 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:04:31 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:31 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:31 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:31 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:31 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:32 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:32 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:32 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:32 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:32 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:04:32 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:32 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:32 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:32 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:33 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:33 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:04:33 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:33 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:33 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:33 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:33 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:33 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:34 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:04:34 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:34 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:34 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:34 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:34 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:34 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:34 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:35 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:35 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:35 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:35 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:35 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:35 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:35 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:04:35 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:04:36 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:36 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:04:36 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:36 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:36 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:36 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:36 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:36 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:36 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:37 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:04:37 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:37 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:37 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:37 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:37 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:37 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:04:37 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:38 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:38 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:38 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:38 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:04:38 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:04:38 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:38 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:38 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:39 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:04:39 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:04:39 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:39 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:39 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:04:39 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:39 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:39 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:40 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:40 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:40 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:40 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:04:40 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:40 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:40 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:40 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:41 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:41 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:41 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:41 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:41 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:04:41 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:41 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:41 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:04:42 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:42 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:42 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:42 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:04:42 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:42 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:04:42 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:42 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:43 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:43 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:04:43 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:43 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:43 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:43 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:43 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:43 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:44 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:44 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:04:44 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:44 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:44 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:04:44 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:44 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:44 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:45 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:45 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:04:45 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:45 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:45 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:45 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:45 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:45 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:46 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:46 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:46 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:46 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:46 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:46 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:46 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:46 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:47 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:47 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:47 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:47 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:04:47 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:47 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:47 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:47 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:48 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:04:48 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:48 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:48 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:04:48 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:04:48 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:48 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:48 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:48 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:04:49 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:49 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:49 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:49 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:49 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:49 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:49 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:50 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:50 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:50 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:50 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:50 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:50 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:50 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:50 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:04:51 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:51 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:51 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:51 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:51 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:51 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:04:51 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:51 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:04:52 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:52 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:52 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:52 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:52 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:52 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:52 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:52 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:04:52 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:53 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:53 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:04:53 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:53 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:53 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:04:53 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:04:53 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:04:54 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:54 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:54 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:54 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:04:54 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:54 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:54 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:55 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:55 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:55 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:55 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:55 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:55 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:55 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:55 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:56 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:04:56 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:56 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:56 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:04:56 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:56 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:56 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:04:56 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:57 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:57 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:57 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:57 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:57 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:57 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:57 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:58 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:58 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:58 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:04:58 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:04:58 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:04:58 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:58 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:04:58 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:04:59 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:59 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:59 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:59 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:04:59 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:04:59 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:04:59 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:04:59 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:00 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:00 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:05:00 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:00 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:00 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:05:00 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.70.208.9 - - [29/Jan/2026:22:05:01 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:01 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:01 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:01 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:01 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:01 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:05:01 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:02 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:02 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:02 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:02 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:02 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:02 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:02 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:03 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.70.208.9 - - [29/Jan/2026:22:05:03 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:05:03 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:03 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:05:03 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:03 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:04 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:05:04 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:05:04 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:04 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:04 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:04 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:04 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:04 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:05 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:05 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:05:05 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:05 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:05:05 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:05 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:05 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:06 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:06 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:06 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:06 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:06 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:06 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:06 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:06 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:07 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:07 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:07 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [29/Jan/2026:22:05:07 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:07 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:07 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:05:07 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:05:07 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:08 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:08 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:08 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:08 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:05:08 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:08 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:08 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:05:08 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:09 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:05:09 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:09 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:09 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:05:09 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:09 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:09 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:09 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:05:10 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:10 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:10 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:10 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:10 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:10 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:10 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:10 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:11 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:11 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:11 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:11 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:11 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:11 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:05:11 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:11 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:12 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:12 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:05:12 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:05:12 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:12 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:12 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:12 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:12 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:13 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:13 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:13 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:13 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:13 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:13 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:13 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:05:14 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:14 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:14 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:15 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:15 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:15 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:15 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:16 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:16 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:05:16 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:16 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:16 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:16 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:05:17 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:05:17 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:05:17 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:17 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:17 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:18 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:18 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:18 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:19 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [29/Jan/2026:22:05:19 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:19 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:19 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:19 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [29/Jan/2026:22:05:20 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:05:20 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:20 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:05:20 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:20 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:20 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:05:21 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:05:21 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:21 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:21 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:05:21 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:22 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:05:22 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:22 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:22 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:23 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:23 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:23 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:23 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:05:24 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:24 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:05:24 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:24 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:24 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:24 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:25 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:25 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.70.208.9 - - [29/Jan/2026:22:05:25 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:05:25 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:26 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:26 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:26 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:26 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:26 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:26 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:05:26 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:26 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [29/Jan/2026:22:05:27 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.70.208.9 - - [29/Jan/2026:22:05:27 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:27 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:27 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:05:27 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:27 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:27 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:28 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:28 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:28 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:28 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:28 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:05:28 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:28 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:28 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:29 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:29 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:29 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:29 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:29 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:05:29 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:05:29 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:05:30 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:30 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:30 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:30 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:30 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:05:30 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:05:30 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:30 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:31 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:31 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:31 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:05:31 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:31 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:31 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:31 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:31 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:32 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:32 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:32 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:32 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:32 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:32 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:32 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:33 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:33 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:33 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:33 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:33 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:33 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:33 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:33 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:34 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [29/Jan/2026:22:05:34 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:34 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [29/Jan/2026:22:05:34 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:34 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:34 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:34 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:34 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:05:35 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:35 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.70.208.9 - - [29/Jan/2026:22:05:35 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [29/Jan/2026:22:05:35 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:35 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:35 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.70.208.9 - - [29/Jan/2026:22:05:35 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:35 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:05:35 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:36 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:36 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:36 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:05:36 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:36 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:05:36 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:36 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:36 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:37 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:37 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:37 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:37 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:37 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:37 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:37 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:37 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:05:38 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:38 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:38 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.70.208.9 - - [29/Jan/2026:22:05:38 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:38 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:05:38 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:38 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:38 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:05:39 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:39 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:39 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:39 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:39 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.70.208.9 - - [29/Jan/2026:22:05:39 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:05:39 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:39 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:40 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:40 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [29/Jan/2026:22:05:40 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:40 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:40 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:40 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [29/Jan/2026:22:05:40 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:40 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:41 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:41 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:41 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.70.208.9 - - [29/Jan/2026:22:05:41 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:41 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:41 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:41 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:41 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.70.208.9 - - [29/Jan/2026:22:05:42 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:42 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:42 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [29/Jan/2026:22:05:42 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.70.208.9 - - [29/Jan/2026:22:05:42 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:42 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.70.208.9 - - [29/Jan/2026:22:05:42 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:05:42 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:43 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:43 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:43 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [29/Jan/2026:22:05:43 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:43 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:43 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:43 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:43 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.70.208.9 - - [29/Jan/2026:22:05:44 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:44 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:44 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:44 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:44 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:44 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.70.208.9 - - [29/Jan/2026:22:05:44 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:44 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.70.208.9 - - [29/Jan/2026:22:05:45 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:45 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [29/Jan/2026:22:05:45 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:45 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:45 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.143 - - [29/Jan/2026:22:05:45 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [29/Jan/2026:22:05:46 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:46 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:46 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:46 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [29/Jan/2026:22:05:46 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:46 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:46 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:46 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:47 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:47 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [29/Jan/2026:22:05:47 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:47 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:47 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.143 - - [29/Jan/2026:22:05:47 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:47 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:48 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.170.128 - - [29/Jan/2026:22:05:48 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.143 - - [29/Jan/2026:22:05:48 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.170.128 - - [29/Jan/2026:22:05:48 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:48 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.128 - - [29/Jan/2026:22:05:48 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:48 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.170.128 - - [29/Jan/2026:22:05:49 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:49 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.170.128 - - [29/Jan/2026:22:05:49 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:49 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.170.128 - - [29/Jan/2026:22:05:49 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:49 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.170.128 - - [29/Jan/2026:22:05:49 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.143 - - [29/Jan/2026:22:05:49 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.170.128 - - [29/Jan/2026:22:05:50 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:50 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.170.128 - - [29/Jan/2026:22:05:50 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:50 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.170.128 - - [29/Jan/2026:22:05:50 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:50 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.170.128 - - [29/Jan/2026:22:05:50 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:50 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.170.128 - - [29/Jan/2026:22:05:51 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:51 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.128 - - [29/Jan/2026:22:05:51 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:51 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.128 - - [29/Jan/2026:22:05:51 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:51 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.128 - - [29/Jan/2026:22:05:51 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.143 - - [29/Jan/2026:22:05:51 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.170.128 - - [29/Jan/2026:22:05:52 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:52 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.128 - - [29/Jan/2026:22:05:52 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.143 - - [29/Jan/2026:22:05:52 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.128 - - [29/Jan/2026:22:05:52 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:52 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.170.128 - - [29/Jan/2026:22:05:52 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:05:52 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:53 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:53 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:53 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:53 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:05:53 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:53 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:53 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.143 - - [29/Jan/2026:22:05:53 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:54 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:54 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:54 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.143 - - [29/Jan/2026:22:05:54 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:54 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:54 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:54 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:54 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:05:55 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:55 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.170.6 - - [29/Jan/2026:22:05:55 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.143 - - [29/Jan/2026:22:05:55 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.170.6 - - [29/Jan/2026:22:05:55 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:55 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.170.6 - - [29/Jan/2026:22:05:55 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.143 - - [29/Jan/2026:22:05:55 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:56 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:56 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.170.6 - - [29/Jan/2026:22:05:56 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:56 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.170.6 - - [29/Jan/2026:22:05:56 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:56 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:05:56 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:56 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.170.6 - - [29/Jan/2026:22:05:57 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:05:57 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:57 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:57 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:57 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:57 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:57 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:05:57 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:05:58 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:58 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.170.6 - - [29/Jan/2026:22:05:58 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:58 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:58 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:58 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:05:58 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:58 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:05:59 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:59 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:05:59 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:59 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.170.6 - - [29/Jan/2026:22:05:59 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:05:59 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:05:59 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:05:59 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:00 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.143 - - [29/Jan/2026:22:06:00 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:00 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:00 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:00 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:00 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:00 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:00 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.170.6 - - [29/Jan/2026:22:06:01 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:01 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.170.6 - - [29/Jan/2026:22:06:01 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.143 - - [29/Jan/2026:22:06:01 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:01 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.143 - - [29/Jan/2026:22:06:01 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:01 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.143 - - [29/Jan/2026:22:06:01 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.170.6 - - [29/Jan/2026:22:06:02 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.143 - - [29/Jan/2026:22:06:02 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:02 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.170.6 - - [29/Jan/2026:22:06:02 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.170.6 - - [29/Jan/2026:22:06:02 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.143 - - [29/Jan/2026:22:06:02 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:03 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:03 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:03 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:03 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:03 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:03 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.170.6 - - [29/Jan/2026:22:06:03 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.143 - - [29/Jan/2026:22:06:03 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:04 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:04 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.170.6 - - [29/Jan/2026:22:06:04 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.143 - - [29/Jan/2026:22:06:04 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:04 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.143 - - [29/Jan/2026:22:06:04 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.170.6 - - [29/Jan/2026:22:06:04 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:04 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:05 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.143 - - [29/Jan/2026:22:06:05 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.170.6 - - [29/Jan/2026:22:06:05 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:05 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:05 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:05 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:05 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:05 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:06 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:06 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:06:06 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:06 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:06 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:06 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:06 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.143 - - [29/Jan/2026:22:06:06 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:07 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:07 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:07 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:07 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:07 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.143 - - [29/Jan/2026:22:06:07 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.170.6 - - [29/Jan/2026:22:06:08 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.143 - - [29/Jan/2026:22:06:08 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:06:08 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:08 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:08 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.143 - - [29/Jan/2026:22:06:08 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.170.6 - - [29/Jan/2026:22:06:08 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:08 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:09 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.143 - - [29/Jan/2026:22:06:09 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:09 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:09 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:09 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.143 - - [29/Jan/2026:22:06:09 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.170.6 - - [29/Jan/2026:22:06:09 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.143 - - [29/Jan/2026:22:06:09 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.170.6 - - [29/Jan/2026:22:06:10 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:06:10 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:10 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:10 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:10 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:06:10 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:10 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:10 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:11 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.143 - - [29/Jan/2026:22:06:11 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:11 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:11 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.170.6 - - [29/Jan/2026:22:06:11 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.143 - - [29/Jan/2026:22:06:11 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:06:11 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:11 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:12 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:12 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:12 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:12 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:12 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:12 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.170.6 - - [29/Jan/2026:22:06:12 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:12 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:13 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.143 - - [29/Jan/2026:22:06:13 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.170.6 - - [29/Jan/2026:22:06:13 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:13 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:13 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:13 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:13 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:13 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:14 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:14 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:14 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:14 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:14 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:14 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.170.6 - - [29/Jan/2026:22:06:14 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.143 - - [29/Jan/2026:22:06:14 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:06:15 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:15 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:15 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:15 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:15 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:06:15 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:15 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:15 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:16 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:16 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:16 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:16 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.170.6 - - [29/Jan/2026:22:06:16 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.143 - - [29/Jan/2026:22:06:16 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.170.6 - - [29/Jan/2026:22:06:16 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.143 - - [29/Jan/2026:22:06:16 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.170.6 - - [29/Jan/2026:22:06:17 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:17 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.170.6 - - [29/Jan/2026:22:06:17 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:17 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:06:17 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:17 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:17 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:17 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:06:18 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:06:18 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.170.6 - - [29/Jan/2026:22:06:18 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:18 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:18 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:18 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:18 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:19 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:06:19 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:19 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.143 - - [29/Jan/2026:22:06:19 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:19 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:19 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.170.6 - - [29/Jan/2026:22:06:19 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:19 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:20 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:20 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:20 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.143 - - [29/Jan/2026:22:06:20 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.170.6 - - [29/Jan/2026:22:06:20 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.143 - - [29/Jan/2026:22:06:20 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:20 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:06:20 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:21 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.143 - - [29/Jan/2026:22:06:21 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:21 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:21 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:21 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:21 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:21 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.143 - - [29/Jan/2026:22:06:21 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:22 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:22 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:22 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.143 - - [29/Jan/2026:22:06:22 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:22 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.143 - - [29/Jan/2026:22:06:22 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:22 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:22 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:23 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.143 - - [29/Jan/2026:22:06:23 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.170.6 - - [29/Jan/2026:22:06:23 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.143 - - [29/Jan/2026:22:06:23 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:23 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:23 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.170.6 - - [29/Jan/2026:22:06:23 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:23 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.170.6 - - [29/Jan/2026:22:06:24 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:24 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.170.6 - - [29/Jan/2026:22:06:24 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:24 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:24 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.143 - - [29/Jan/2026:22:06:24 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:24 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:24 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:24 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:25 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:25 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:25 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.170.6 - - [29/Jan/2026:22:06:25 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.143 - - [29/Jan/2026:22:06:25 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:25 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:25 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.170.6 - - [29/Jan/2026:22:06:25 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:26 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:26 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:26 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.170.6 - - [29/Jan/2026:22:06:26 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:26 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:26 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.143 - - [29/Jan/2026:22:06:26 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:26 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.143 - - [29/Jan/2026:22:06:27 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:27 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.143 - - [29/Jan/2026:22:06:27 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:27 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:27 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.170.6 - - [29/Jan/2026:22:06:27 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.143 - - [29/Jan/2026:22:06:27 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:27 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:28 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:06:28 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:28 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.170.6 - - [29/Jan/2026:22:06:28 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:28 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.170.6 - - [29/Jan/2026:22:06:28 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:28 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.170.6 - - [29/Jan/2026:22:06:28 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:29 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:29 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.143 - - [29/Jan/2026:22:06:29 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:29 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:29 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.170.6 - - [29/Jan/2026:22:06:29 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:29 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.170.6 - - [29/Jan/2026:22:06:29 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.143 - - [29/Jan/2026:22:06:30 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:30 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:30 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:30 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.143 - - [29/Jan/2026:22:06:30 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.170.6 - - [29/Jan/2026:22:06:30 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:30 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.143 - - [29/Jan/2026:22:06:30 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:31 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:31 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:31 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:31 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.170.6 - - [29/Jan/2026:22:06:32 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:32 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:32 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.170.6 - - [29/Jan/2026:22:06:32 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.170.6 - - [29/Jan/2026:22:06:33 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.170.6 - - [29/Jan/2026:22:06:33 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.69.50.159 - - [29/Jan/2026:22:39:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:53 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:54 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:54 +0100] "GET /wp-content/themes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:54 +0100] "GET /wp-admin/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:54 +0100] "GET /wp-includes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:55 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:55 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:55 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:55 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:55 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:55 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:56 +0100] "GET /blurbs.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.166 - - [29/Jan/2026:22:47:56 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:56 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:56 +0100] "GET /shelp.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:56 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:56 +0100] "GET /dex.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:57 +0100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:57 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:57 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:57 +0100] "GET /wp-admin/zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:57 +0100] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:57 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:58 +0100] "GET /shlo.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:58 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:58 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:58 +0100] "GET /php8.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:58 +0100] "GET /lufix1.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:58 +0100] "GET /witmm.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:59 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:59 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:59 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:59 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:59 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:47:59 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:48:00 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:48:00 +0100] "GET /txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:48:00 +0100] "GET /wp-content/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:48:00 +0100] "GET /wp-admin/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:48:00 +0100] "GET /postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:48:00 +0100] "GET /wp-content/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.155 - - [29/Jan/2026:22:48:01 +0100] "GET /wp-admin/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.223.111 - - [30/Jan/2026:03:14:26 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 104.23.223.110 - - [30/Jan/2026:03:16:41 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.69.70.86 - - [30/Jan/2026:03:54:21 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.69.130.30 - - [30/Jan/2026:04:56:37 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 104.22.24.143 - - [30/Jan/2026:05:14:16 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.24.183 - - [30/Jan/2026:05:14:16 +0100] "GET /details.php?post_id=1&v=Favorite HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.217.85 - - [30/Jan/2026:05:27:40 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.210.117 - - [30/Jan/2026:06:04:06 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.50.159 - - [30/Jan/2026:06:59:33 +0100] "GET / HTTP/1.1" 301 162 "https://spyhost.site" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Brave/1.42.105" 172.71.164.110 - - [30/Jan/2026:07:32:50 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 172.69.136.165 - - [30/Jan/2026:08:11:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 104.22.1.198 - - [30/Jan/2026:12:51:30 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.78.92 - - [30/Jan/2026:12:51:30 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.95.129 - - [30/Jan/2026:14:51:53 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 172.71.255.96 - - [30/Jan/2026:14:53:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.71.191.74 - - [30/Jan/2026:19:07:28 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.71.190.9 - - [30/Jan/2026:19:07:29 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" 172.71.190.9 - - [30/Jan/2026:19:07:29 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.71.190.9 - - [30/Jan/2026:19:07:29 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 172.71.190.9 - - [30/Jan/2026:19:07:29 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.71.190.9 - - [30/Jan/2026:19:07:30 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.71.190.9 - - [30/Jan/2026:19:07:30 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.71.172.20 - - [30/Jan/2026:19:38:20 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 104.23.223.111 - - [30/Jan/2026:19:39:31 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.22.1.32 - - [30/Jan/2026:19:58:24 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.184.207 - - [30/Jan/2026:22:49:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.6.151 - - [30/Jan/2026:22:58:03 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [30/Jan/2026:22:58:04 +0100] "GET /rip.php HTTP/1.1" 301 162 "-" "-" 162.158.48.233 - - [30/Jan/2026:23:04:10 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.69.221.227 - - [30/Jan/2026:23:11:01 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 104.23.217.47 - - [30/Jan/2026:23:52:26 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 104.23.217.47 - - [30/Jan/2026:23:52:29 +0100] "GET /8xyz.php HTTP/1.1" 301 162 "-" "-" 172.71.134.112 - - [31/Jan/2026:00:08:41 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.119.64 - - [31/Jan/2026:00:08:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.68.3.126 - - [31/Jan/2026:00:12:06 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 172.68.2.122 - - [31/Jan/2026:00:12:06 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.68.2.122 - - [31/Jan/2026:00:12:06 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 172.68.2.122 - - [31/Jan/2026:00:12:06 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.2.122 - - [31/Jan/2026:00:12:07 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.68.2.122 - - [31/Jan/2026:00:12:07 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.68.2.122 - - [31/Jan/2026:00:12:07 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.223.111 - - [31/Jan/2026:01:21:54 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 162.159.113.110 - - [31/Jan/2026:02:18:26 +0100] "GET /wp-admin/install.php?step=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 104.23.229.112 - - [31/Jan/2026:02:42:04 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" 172.71.172.86 - - [31/Jan/2026:05:32:29 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.87.68 - - [31/Jan/2026:05:32:29 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.69.151.200 - - [31/Jan/2026:05:44:58 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 162.158.87.24 - - [31/Jan/2026:05:44:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.23.223.110 - - [31/Jan/2026:07:03:07 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 104.23.223.110 - - [31/Jan/2026:07:03:22 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.175.156 - - [31/Jan/2026:07:10:05 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 104.23.221.136 - - [31/Jan/2026:08:14:27 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 162.158.49.201 - - [31/Jan/2026:11:16:35 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [31/Jan/2026:11:16:36 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [31/Jan/2026:11:16:36 +0100] "GET /ms-edit.php HTTP/1.1" 301 162 "-" "-" 162.158.49.201 - - [31/Jan/2026:11:16:37 +0100] "GET /w2025.php HTTP/1.1" 301 162 "-" "-" 104.23.253.108 - - [31/Jan/2026:15:38:51 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.42.76 - - [31/Jan/2026:15:57:12 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.64.200.99 - - [31/Jan/2026:15:58:40 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.42.137 - - [31/Jan/2026:16:00:17 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.23.223.110 - - [31/Jan/2026:17:09:18 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.182.192 - - [31/Jan/2026:17:12:25 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.70.92.194 - - [31/Jan/2026:17:24:04 +0100] "GET /license.txt HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 172.70.211.119 - - [31/Jan/2026:19:18:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.159.98.96 - - [31/Jan/2026:20:35:59 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.159.98.18 - - [31/Jan/2026:20:35:59 +0100] "GET /166.php HTTP/1.1" 301 162 "-" "-" 162.159.98.18 - - [31/Jan/2026:20:36:00 +0100] "GET /2026.php HTTP/1.1" 301 162 "-" "-" 162.159.98.18 - - [31/Jan/2026:20:36:00 +0100] "GET /muzu.php HTTP/1.1" 301 162 "-" "-" 162.159.98.18 - - [31/Jan/2026:20:36:01 +0100] "GET /reze.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:01 +0100] "GET /jsond.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:01 +0100] "GET /x7.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:02 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:02 +0100] "GET //lala.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:02 +0100] "GET /8xyz.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:03 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:03 +0100] "GET /Update/f35.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:03 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:04 +0100] "GET /Wp-good.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:04 +0100] "GET /tphp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:05 +0100] "GET /a1.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:05 +0100] "GET /nyan.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:05 +0100] "GET //autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:06 +0100] "GET //alfa.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:06 +0100] "GET //wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:07 +0100] "GET /luxe.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:07 +0100] "GET /update/wpupex.php/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:07 +0100] "GET /rezor.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:08 +0100] "GET //doc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:08 +0100] "GET //wp-admin/user/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:08 +0100] "GET //wp-includes/css/about.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:09 +0100] "GET //install.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:09 +0100] "GET /~norapump/hah.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:09 +0100] "GET /sto.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:10 +0100] "GET //x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:10 +0100] "GET //test.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:11 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:11 +0100] "GET /n3.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:11 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:12 +0100] "GET /o.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:12 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:13 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:13 +0100] "GET /.trash7309/f/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:13 +0100] "GET //wp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:14 +0100] "GET //wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:14 +0100] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:14 +0100] "GET //h.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:15 +0100] "GET //skin/install/default/security.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:15 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:16 +0100] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:16 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:16 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:17 +0100] "GET /png.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:17 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:18 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:18 +0100] "GET //wp-content/languages/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:18 +0100] "GET //wp-content/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:19 +0100] "GET /wp/wp-includes//index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:19 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:19 +0100] "GET //wso.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:20 +0100] "GET /images/fk2e3/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:20 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:21 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:21 +0100] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:21 +0100] "GET /sxo.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:22 +0100] "GET //admin.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:22 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:22 +0100] "GET //wp-content/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:23 +0100] "GET /mans.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:23 +0100] "GET //dropdown.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:24 +0100] "GET /WordPress/x/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:24 +0100] "GET /ze.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:24 +0100] "GET //geck.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:25 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:25 +0100] "GET //admin/function.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:25 +0100] "GET //index/function.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:26 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:26 +0100] "GET /ftp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:27 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:27 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:27 +0100] "GET //wp-admin/class-db.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:28 +0100] "GET /cool.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:28 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:28 +0100] "GET //simple.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:29 +0100] "GET //elp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:29 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:30 +0100] "GET //wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:30 +0100] "GET //inputs.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:30 +0100] "GET /.trash7309/fafa/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:31 +0100] "GET /system.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:31 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:32 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:32 +0100] "GET /museu/yhweq.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:32 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:33 +0100] "GET //w.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:33 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:34 +0100] "GET /gib.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:34 +0100] "GET /wp-miiss.php.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:35 +0100] "GET /ho/wpup.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:35 +0100] "GET //moon.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:35 +0100] "GET /filesss.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:36 +0100] "GET /hey.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:36 +0100] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:36 +0100] "GET //1337.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:37 +0100] "GET //buy.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:37 +0100] "GET /apsarasarts/okk.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:38 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:38 +0100] "GET /wp-is.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:38 +0100] "GET /jmfi2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:39 +0100] "GET //about/function.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:39 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:40 +0100] "GET //wp-content/json.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:40 +0100] "GET /hzz.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:40 +0100] "GET //shell20211028.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:41 +0100] "GET //content.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:41 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:41 +0100] "GET /ps.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:42 +0100] "GET //wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:42 +0100] "GET /.trash7309/dd/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:43 +0100] "GET /cache.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:43 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:43 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:44 +0100] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:44 +0100] "GET //user.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:45 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:45 +0100] "GET //index/function.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:45 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:46 +0100] "GET /rip.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:46 +0100] "GET /wp4.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:46 +0100] "GET //403.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:47 +0100] "GET //wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:47 +0100] "GET /asd67.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:47 +0100] "GET //sad/about.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:48 +0100] "GET /oivcl.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:48 +0100] "GET //about.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:49 +0100] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:49 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:50 +0100] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:50 +0100] "GET /x/ HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:50 +0100] "GET //.cache/x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:51 +0100] "GET /dr.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:51 +0100] "GET /raw.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:51 +0100] "GET //wp-includes/css/about.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:52 +0100] "GET //wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:52 +0100] "GET /ioxi-o2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:53 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:53 +0100] "GET /dlu.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:53 +0100] "GET //wp-content/about.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:54 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:54 +0100] "GET /packed.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:55 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:55 +0100] "GET //404.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:55 +0100] "GET /des.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:56 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [31/Jan/2026:20:36:56 +0100] "GET //lufix.php HTTP/1.1" 301 162 "-" "-" 172.68.10.41 - - [31/Jan/2026:22:49:57 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 141.101.96.61 - - [31/Jan/2026:23:31:46 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.130.254 - - [31/Jan/2026:23:31:48 +0100] "GET /ws55.php HTTP/1.1" 301 162 "-" "-" 172.71.130.254 - - [31/Jan/2026:23:31:49 +0100] "GET /ws53.php HTTP/1.1" 301 162 "-" "-" 172.71.130.254 - - [31/Jan/2026:23:31:49 +0100] "GET /bk.php HTTP/1.1" 301 162 "-" "-" 172.71.130.254 - - [31/Jan/2026:23:31:49 +0100] "GET /gettest.php HTTP/1.1" 301 162 "-" "-" 172.71.130.254 - - [31/Jan/2026:23:31:50 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.130.254 - - [31/Jan/2026:23:31:50 +0100] "GET /soniau.php HTTP/1.1" 301 162 "-" "-" 172.71.130.254 - - [31/Jan/2026:23:31:50 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 172.71.130.254 - - [31/Jan/2026:23:31:51 +0100] "GET /class-cc.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:51 +0100] "GET /clasa99.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:51 +0100] "GET /clasa992.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:52 +0100] "GET /wp-webdb.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:52 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:52 +0100] "GET /blurbs15.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:53 +0100] "GET /tracke.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:53 +0100] "GET /un.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:53 +0100] "GET /f.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:54 +0100] "GET /ftde.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:54 +0100] "GET /revealability.php HTTP/1.1" 301 162 "-" "-" 141.101.96.61 - - [31/Jan/2026:23:31:54 +0100] "GET /zlxoczuu.php HTTP/1.1" 301 162 "-" "-" 172.71.232.81 - - [01/Feb/2026:02:49:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.222.87 - - [01/Feb/2026:02:49:56 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.151.186 - - [01/Feb/2026:04:10:44 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.108.91 - - [01/Feb/2026:04:10:59 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.147.173 - - [01/Feb/2026:04:13:27 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.158.137.40 - - [01/Feb/2026:04:42:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 104.23.221.136 - - [01/Feb/2026:09:11:06 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 104.23.221.136 - - [01/Feb/2026:09:11:10 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 162.159.98.96 - - [01/Feb/2026:11:01:49 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:51 +0100] "GET /neshe.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:51 +0100] "GET /wp-site.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:54 +0100] "GET /environment.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:55 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:55 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:55 +0100] "GET /tmpls.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:56 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:56 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:57 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:57 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:57 +0100] "GET /indeex.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:58 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:58 +0100] "GET /503.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:58 +0100] "GET /html.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:59 +0100] "GET /custom-background.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:01:59 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:00 +0100] "GET /img.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:00 +0100] "GET /css/radio.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:00 +0100] "GET //cwclass.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:01 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:01 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:02 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:02 +0100] "GET /oo.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:03 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:03 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:04 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:04 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:04 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:05 +0100] "GET /server.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:05 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:06 +0100] "GET /yanz.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:06 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:07 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:08 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:08 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:09 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:09 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:10 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:10 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:11 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:11 +0100] "GET /priv.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:11 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:12 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:12 +0100] "GET /wp-load.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:12 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:13 +0100] "GET /editor.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:13 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:14 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:14 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:14 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:15 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:16 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:16 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:17 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:18 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:18 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:18 +0100] "GET /backup.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:19 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:19 +0100] "GET /06.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:20 +0100] "GET /size.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:20 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:20 +0100] "GET /dev1s.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:21 +0100] "GET /zr.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:21 +0100] "GET /styles.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:22 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:22 +0100] "GET /revision.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:23 +0100] "GET /panel.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:23 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:24 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:24 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:24 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:25 +0100] "GET /siteheads.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:25 +0100] "GET /okxh.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:26 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:26 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:26 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:27 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:27 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:28 +0100] "GET /ar/mgsl.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:28 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:28 +0100] "GET /12.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:29 +0100] "GET /yr.PHP HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:29 +0100] "GET /dex.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:29 +0100] "GET /yas.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:30 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:30 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:31 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:32 +0100] "GET /wp-content/lock360.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:32 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:33 +0100] "GET /acxx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:33 +0100] "GET /includes/phpinfo.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:33 +0100] "GET /mk.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:34 +0100] "GET /zoo.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:35 +0100] "GET /33.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:35 +0100] "GET /js/sxx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:36 +0100] "GET /mode.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:36 +0100] "GET /docs.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:37 +0100] "GET /abc.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:37 +0100] "GET /ioxi001.PhP7 HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:38 +0100] "GET /wp-tot.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:38 +0100] "GET /mah/xBrain.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:39 +0100] "GET /ioxi.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:39 +0100] "GET /ans.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:40 +0100] "GET /ok.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:40 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:40 +0100] "GET /fileupload.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:41 +0100] "GET /ran.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:41 +0100] "GET /set.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:42 +0100] "GET /bs2.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:42 +0100] "GET /pegi.PhP8 HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:43 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:43 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:43 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:44 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:44 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:44 +0100] "GET /zfile.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:45 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:45 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:46 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:46 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:46 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:47 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 162.159.98.96 - - [01/Feb/2026:11:02:47 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "-" 104.23.175.156 - - [01/Feb/2026:12:25:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.70.94.173 - - [01/Feb/2026:13:23:23 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.68.26.186 - - [01/Feb/2026:13:23:23 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.148.122 - - [01/Feb/2026:13:27:39 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 104.23.223.111 - - [01/Feb/2026:13:29:41 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.154.139 - - [01/Feb/2026:14:54:08 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.23.29 - - [01/Feb/2026:14:58:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.23.223.110 - - [01/Feb/2026:15:32:11 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 172.71.160.36 - - [01/Feb/2026:16:32:02 +0100] "GET /txets.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.6.231 - - [01/Feb/2026:17:14:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.71.222.106 - - [01/Feb/2026:21:07:55 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.71.222.106 - - [01/Feb/2026:21:07:56 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.71.222.106 - - [01/Feb/2026:21:07:56 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.71.222.106 - - [01/Feb/2026:21:07:56 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.71.222.106 - - [01/Feb/2026:21:07:56 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.71.222.106 - - [01/Feb/2026:21:07:57 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.71.222.106 - - [01/Feb/2026:21:07:57 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.68.36.154 - - [01/Feb/2026:21:20:25 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:29 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:31 +0100] "GET /wp-content/themes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:32 +0100] "GET /wp-admin/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:33 +0100] "GET /wp-includes/style.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:35 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:37 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:43 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:44 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:45 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:46 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:47 +0100] "GET /blurbs.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:47 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:47 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:47 +0100] "GET /shelp.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:48 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:48 +0100] "GET /dex.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:48 +0100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:48 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:49 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:49 +0100] "GET /wp-admin/zwso.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:50 +0100] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:52 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:53 +0100] "GET /shlo.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:53 +0100] "GET /133.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:53 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:54 +0100] "GET /php8.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:54 +0100] "GET /lufix1.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:55 +0100] "GET /witmm.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:56 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:56 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:56 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:57 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:20:58 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:21:00 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:21:01 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:21:02 +0100] "GET /txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:21:03 +0100] "GET /wp-content/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:21:04 +0100] "GET /wp-admin/txets.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:21:04 +0100] "GET /postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:21:05 +0100] "GET /wp-content/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.36.154 - - [01/Feb/2026:21:21:06 +0100] "GET /wp-admin/postnews.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.10.40 - - [01/Feb/2026:22:43:03 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.68.10.40 - - [01/Feb/2026:22:43:59 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.71.184.206 - - [01/Feb/2026:22:48:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.233.55 - - [01/Feb/2026:23:21:58 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:08 +0100] "GET /thebe.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:09 +0100] "GET /aboutc.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:09 +0100] "GET /ioxi.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:09 +0100] "GET /tempae.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:10 +0100] "GET /bayss.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:10 +0100] "GET /gettest.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:11 +0100] "GET /ah25.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:11 +0100] "GET /8xyz.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:11 +0100] "GET /ms-edit.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:12 +0100] "GET /edit-tags.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:12 +0100] "GET /bk.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:12 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:13 +0100] "GET /ws53.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:13 +0100] "GET /revealability.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:14 +0100] "GET /soniau.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:14 +0100] "GET /ws55.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:18 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:18 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:18 +0100] "GET /public/revealability.php HTTP/1.1" 301 162 "-" "-" 172.70.233.55 - - [01/Feb/2026:23:22:19 +0100] "GET /f.php HTTP/1.1" 301 162 "-" "-" 104.23.170.37 - - [01/Feb/2026:23:35:31 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.68.3.126 - - [02/Feb/2026:00:27:21 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.68.3.126 - - [02/Feb/2026:00:27:22 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.68.3.126 - - [02/Feb/2026:00:27:22 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 172.68.3.126 - - [02/Feb/2026:00:27:22 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 172.68.3.126 - - [02/Feb/2026:00:27:22 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.68.3.126 - - [02/Feb/2026:00:27:22 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.3.126 - - [02/Feb/2026:00:27:22 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 172.69.214.123 - - [02/Feb/2026:04:58:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 172.71.120.7 - - [02/Feb/2026:04:58:23 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 104.23.170.36 - - [02/Feb/2026:07:25:27 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.251.194 - - [02/Feb/2026:08:03:54 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.70.143.187 - - [02/Feb/2026:08:06:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.69.132.224 - - [02/Feb/2026:08:24:29 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.64.215.12 - - [02/Feb/2026:09:32:07 +0100] "GET / HTTP/1.1" 301 162 "-" "curl/7.29.0" 172.68.159.142 - - [02/Feb/2026:10:32:24 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.221.137 - - [02/Feb/2026:10:42:52 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.221.137 - - [02/Feb/2026:10:43:21 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.70.94.172 - - [02/Feb/2026:11:45:43 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.42.178 - - [02/Feb/2026:12:22:47 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 172.68.211.12 - - [02/Feb/2026:12:51:21 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.68.211.12 - - [02/Feb/2026:12:51:22 +0100] "GET /rip.php HTTP/1.1" 301 162 "-" "-" 172.71.95.129 - - [02/Feb/2026:14:06:51 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0 Safari/537.36" 104.23.253.108 - - [02/Feb/2026:14:10:23 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.70.80.22 - - [02/Feb/2026:14:10:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 162.158.63.76 - - [02/Feb/2026:14:10:29 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.69.130.30 - - [02/Feb/2026:14:12:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 172.71.124.49 - - [02/Feb/2026:15:11:43 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:46 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:46 +0100] "GET /a1vx.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:47 +0100] "GET /tx46.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:47 +0100] "GET /b44.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:48 +0100] "GET /ii5file.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:48 +0100] "GET /forbidals.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:49 +0100] "GET /dev1s.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:50 +0100] "GET /%E8%93%9D%E7%99%BD%E9%93%BE%E6%8E%A5.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:50 +0100] "GET /ck.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:51 +0100] "GET /ffd.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:52 +0100] "GET /anna.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:52 +0100] "GET /pass4.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:53 +0100] "GET /qasu.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:53 +0100] "GET /Gi8.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:54 +0100] "GET /admiin.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:54 +0100] "GET /ol.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:55 +0100] "GET /jmfi2.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:55 +0100] "GET /ez.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:56 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:57 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:57 +0100] "GET /vxrl.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:58 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:11:58 +0100] "GET /cfile.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:00 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:01 +0100] "GET /axx.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:02 +0100] "GET /vxrl.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:02 +0100] "GET /in.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:03 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:04 +0100] "GET /style2.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:05 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:05 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:06 +0100] "GET /wsback.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:06 +0100] "GET /pm.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:07 +0100] "GET /karak.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:08 +0100] "GET /trd.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:08 +0100] "GET /past.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:09 +0100] "GET /prv8.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:10 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:10 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:11 +0100] "GET /cron.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:11 +0100] "GET /super.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:12 +0100] "GET /aw.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:12 +0100] "GET /dev.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:13 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:14 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:14 +0100] "GET /155.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:15 +0100] "GET /hello.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:16 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:17 +0100] "GET /wp-gr.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:17 +0100] "GET /tcp.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:18 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:18 +0100] "GET /jlex3.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:19 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:20 +0100] "GET /ioxi.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:20 +0100] "GET /fe5.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:21 +0100] "GET /ov.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:21 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:22 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:23 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:23 +0100] "GET /weo.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:24 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:24 +0100] "GET /ioxi2.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:25 +0100] "GET /nope.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:26 +0100] "GET /class.1.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:26 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:27 +0100] "GET /async.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:28 +0100] "GET /file17.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:29 +0100] "GET /ff.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:30 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:31 +0100] "GET /png.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:31 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:32 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:33 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:34 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:34 +0100] "GET /wp-update.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:35 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:36 +0100] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:37 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:38 +0100] "GET /Ova-Simple.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:39 +0100] "GET /lc.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:39 +0100] "GET /r4f_1.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:40 +0100] "GET /hexx.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:40 +0100] "GET /cbrfo.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:41 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:42 +0100] "GET /jquery.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:42 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:43 +0100] "GET /miansha.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:44 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:45 +0100] "GET //xfile25.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:46 +0100] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:46 +0100] "GET /ok.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:47 +0100] "GET /fi.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:48 +0100] "GET /muzu.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:49 +0100] "GET /reze.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:50 +0100] "GET /styll.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:51 +0100] "GET /x7.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:52 +0100] "GET /thebe.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:52 +0100] "GET /ddd.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:53 +0100] "GET /ccs.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:53 +0100] "GET /f355.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:54 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:55 +0100] "GET /8xyz.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:56 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:56 +0100] "GET /ioxi.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:57 +0100] "GET /xpwer1.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:57 +0100] "GET //lala.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:58 +0100] "GET //about.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:12:59 +0100] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:00 +0100] "GET //cgi-bin/index.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:02 +0100] "GET //wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:02 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:04 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:05 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:05 +0100] "GET /x/ HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:06 +0100] "GET /ss1.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:07 +0100] "GET //goods.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:08 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:08 +0100] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:09 +0100] "GET //adminfuns.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:10 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:11 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:12 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:13 +0100] "GET /f5.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:14 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:15 +0100] "GET //f6.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:16 +0100] "GET //edit.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:16 +0100] "GET //aa.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:17 +0100] "GET //wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:18 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:18 +0100] "GET //av.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:19 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:19 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:20 +0100] "GET /jane.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:21 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:21 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:23 +0100] "GET /wen.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:24 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:24 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:25 +0100] "GET //class.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:26 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:26 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:27 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:27 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:28 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:30 +0100] "GET /blurbs18.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:31 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:32 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:33 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:34 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:35 +0100] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:36 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:36 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:38 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:39 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:40 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:40 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:41 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:41 +0100] "GET /X7x.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:42 +0100] "GET /166.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:43 +0100] "GET /plss3.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:44 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:45 +0100] "GET /temp.php/wp-update.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:45 +0100] "GET /admins.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:46 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:46 +0100] "GET /main.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:47 +0100] "GET /a1.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:47 +0100] "GET /lala.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:48 +0100] "GET /aaa.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:49 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:49 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:50 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:51 +0100] "GET /nyan.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:51 +0100] "GET /jsond.php HTTP/1.1" 301 162 "-" "-" 172.71.124.49 - - [02/Feb/2026:15:13:52 +0100] "GET /admin/admin.php HTTP/1.1" 301 162 "-" "-" 104.23.223.111 - - [02/Feb/2026:15:16:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3" 104.23.211.195 - - [02/Feb/2026:15:21:05 +0100] "GET / HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 162.158.217.149 - - [02/Feb/2026:17:14:35 +0100] "GET / HTTP/1.1" 301 162 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" 172.71.141.34 - - [02/Feb/2026:17:14:36 +0100] "GET //news/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" 162.158.217.149 - - [02/Feb/2026:17:14:37 +0100] "GET //blog/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" 162.158.217.149 - - [02/Feb/2026:17:14:38 +0100] "GET //wordpress/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" 172.71.141.34 - - [02/Feb/2026:17:14:38 +0100] "GET //wp/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" 162.158.217.149 - - [02/Feb/2026:17:14:39 +0100] "GET //site/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" 162.158.39.198 - - [02/Feb/2026:17:24:40 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:42 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:43 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:43 +0100] "GET /ver.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:44 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:44 +0100] "GET /file22.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:45 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:45 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:46 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:46 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:46 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:47 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:48 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:48 +0100] "GET /amax.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:48 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:49 +0100] "GET /990.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:49 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:50 +0100] "GET /ma.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:50 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:50 +0100] "GET /data.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:51 +0100] "GET /check.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:51 +0100] "GET /ad.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:52 +0100] "GET /wp-header-json.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:52 +0100] "GET /ultra.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:52 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:53 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:53 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:54 +0100] "GET /xa.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:54 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:55 +0100] "GET /footer.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:55 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:56 +0100] "GET /pro.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:56 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:57 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:57 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:58 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:58 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:58 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:24:59 +0100] "GET /999.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:25:00 +0100] "GET /xxxx.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:25:00 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:25:00 +0100] "GET /s1.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:25:01 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:25:01 +0100] "GET /re.php HTTP/1.1" 301 162 "-" "-" 162.158.39.198 - - [02/Feb/2026:17:25:02 +0100] "GET /file56.php HTTP/1.1" 301 162 "-" "-" 172.71.148.123 - - [02/Feb/2026:17:55:08 +0100] "GET //vendor/phpunit/phpunit/phpunit.xsd HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 104.23.229.113 - - [02/Feb/2026:18:23:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; OpenEASM/1.0)" 172.71.184.206 - - [02/Feb/2026:19:57:14 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.68.10.40 - - [02/Feb/2026:19:58:06 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.70.47.160 - - [02/Feb/2026:21:04:49 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.23.211.194 - - [02/Feb/2026:21:22:17 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 104.23.211.194 - - [02/Feb/2026:21:22:17 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 104.23.211.194 - - [02/Feb/2026:21:22:18 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 104.23.211.194 - - [02/Feb/2026:21:22:18 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.211.194 - - [02/Feb/2026:21:22:18 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.211.194 - - [02/Feb/2026:21:22:18 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 104.23.211.194 - - [02/Feb/2026:21:22:18 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 172.68.3.126 - - [02/Feb/2026:21:54:55 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.68.3.126 - - [02/Feb/2026:21:54:55 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.68.3.126 - - [02/Feb/2026:21:54:55 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.68.3.126 - - [02/Feb/2026:21:54:55 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.68.3.126 - - [02/Feb/2026:21:54:55 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 172.68.3.126 - - [02/Feb/2026:21:54:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 172.68.3.126 - - [02/Feb/2026:21:54:56 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.71.184.207 - - [02/Feb/2026:22:43:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.22.20.234 - - [02/Feb/2026:23:26:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 141.101.69.72 - - [03/Feb/2026:03:19:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.68.26.186 - - [03/Feb/2026:04:46:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 104.23.223.40 - - [03/Feb/2026:05:20:37 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 104.23.223.111 - - [03/Feb/2026:05:20:38 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 172.71.23.30 - - [03/Feb/2026:05:46:39 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 162.158.210.116 - - [03/Feb/2026:06:08:28 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.23.221.137 - - [03/Feb/2026:07:33:45 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.221.136 - - [03/Feb/2026:07:35:33 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.172.11 - - [03/Feb/2026:07:52:41 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.159.96 - - [03/Feb/2026:10:19:26 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.70.111.162 - - [03/Feb/2026:11:26:05 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.22.1.199 - - [03/Feb/2026:12:45:20 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.234.183 - - [03/Feb/2026:14:19:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 162.158.94.22 - - [03/Feb/2026:14:19:20 +0100] "GET //news/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 172.71.148.122 - - [03/Feb/2026:14:19:22 +0100] "GET //blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 162.158.23.230 - - [03/Feb/2026:14:19:25 +0100] "GET //wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 162.158.111.230 - - [03/Feb/2026:14:19:28 +0100] "GET //wp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 162.158.94.22 - - [03/Feb/2026:14:19:30 +0100] "GET //site/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 172.71.134.112 - - [03/Feb/2026:15:54:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.225.193 - - [03/Feb/2026:15:54:40 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 162.158.217.148 - - [03/Feb/2026:17:12:47 +0100] "GET / HTTP/1.1" 301 162 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 172.71.141.34 - - [03/Feb/2026:17:12:49 +0100] "GET //news/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 172.71.141.34 - - [03/Feb/2026:17:12:49 +0100] "GET //blog/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 162.158.217.148 - - [03/Feb/2026:17:12:50 +0100] "GET //wordpress/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 162.158.217.148 - - [03/Feb/2026:17:12:51 +0100] "GET //wp/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 172.71.141.34 - - [03/Feb/2026:17:12:51 +0100] "GET //site/ HTTP/1.1" 301 162 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 172.70.208.108 - - [03/Feb/2026:18:44:57 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.175.110 - - [03/Feb/2026:18:45:06 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.69.176.91 - - [03/Feb/2026:19:23:09 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.69.166.67 - - [03/Feb/2026:19:23:14 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.182.193 - - [03/Feb/2026:19:41:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 172.68.34.15 - - [03/Feb/2026:20:04:36 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.68.35.157 - - [03/Feb/2026:20:04:36 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.68.35.157 - - [03/Feb/2026:20:04:36 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.35.157 - - [03/Feb/2026:20:04:36 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 172.68.35.157 - - [03/Feb/2026:20:04:36 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.68.35.157 - - [03/Feb/2026:20:04:36 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.68.35.157 - - [03/Feb/2026:20:04:36 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 162.158.158.166 - - [03/Feb/2026:20:12:57 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 162.158.158.166 - - [03/Feb/2026:20:12:57 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 162.158.159.31 - - [03/Feb/2026:20:12:58 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 162.158.159.31 - - [03/Feb/2026:20:12:58 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 162.158.159.31 - - [03/Feb/2026:20:12:58 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 162.158.159.31 - - [03/Feb/2026:20:12:58 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 162.158.159.31 - - [03/Feb/2026:20:12:58 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.71.24.188 - - [03/Feb/2026:22:04:30 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:31 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:32 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:32 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:32 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:33 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:33 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:33 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:34 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:34 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:35 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:35 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:36 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:36 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:37 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:37 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:37 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:38 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:38 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:38 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:39 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:39 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:39 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:40 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:40 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:40 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:41 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:41 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:41 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:42 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:42 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:42 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:43 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:43 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:44 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:44 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:44 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:45 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:45 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:46 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:46 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:46 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:46 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:47 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:47 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:47 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:48 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:48 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:48 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:48 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:49 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:49 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:49 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:49 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:50 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:50 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:51 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:51 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:51 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:52 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:52 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:52 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:53 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:53 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:53 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:54 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:54 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:54 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:54 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:55 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:55 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:55 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:56 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:56 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:56 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:57 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:57 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:58 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:59 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:59 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:04:59 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:00 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:00 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:00 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:01 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:01 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:01 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:01 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:02 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:02 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:02 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:03 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:03 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:03 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:04 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:04 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:05 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:05 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:06 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:06 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:06 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:06 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:07 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:07 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:07 +0100] "GET /juuuu.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:08 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:08 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:08 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:09 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:09 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:09 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:10 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:10 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:10 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:11 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:11 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:11 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:12 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:12 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:12 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:12 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:13 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:13 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:13 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:14 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:14 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:14 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:15 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:15 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:15 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:16 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:16 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:16 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:16 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:17 +0100] "GET /ac.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:17 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:17 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:18 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:18 +0100] "GET /xaz.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:18 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:19 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:19 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:19 +0100] "GET /wtz.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:20 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:20 +0100] "GET /xb.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:20 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:21 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 172.71.24.188 - - [03/Feb/2026:22:05:21 +0100] "GET /rh.php HTTP/1.1" 301 162 "-" "-" 162.159.102.104 - - [03/Feb/2026:22:07:24 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 108.162.245.157 - - [03/Feb/2026:22:10:10 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.184.207 - - [03/Feb/2026:22:26:44 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.68.10.41 - - [03/Feb/2026:22:27:14 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.6.150 - - [03/Feb/2026:22:51:49 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:50 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:50 +0100] "GET /gettest.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:51 +0100] "GET /tempae.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:51 +0100] "GET /thebe.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:51 +0100] "GET /ah25.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:52 +0100] "GET /ioxi.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:52 +0100] "GET /aboutc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:52 +0100] "GET /8xyz.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:53 +0100] "GET /RIP.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:53 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:53 +0100] "GET /bayss.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:54 +0100] "GET /easy.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:54 +0100] "GET /edorxrr.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:54 +0100] "GET /f6.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:55 +0100] "GET /zmia.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:55 +0100] "GET /wp-set.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:55 +0100] "GET /rip.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:56 +0100] "GET /ws38.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:56 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:56 +0100] "GET /166.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:57 +0100] "GET /reze.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:57 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:57 +0100] "GET /wwx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:58 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:58 +0100] "GET /uploaxa1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:58 +0100] "GET /rzzaq.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:59 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:59 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:51:59 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:00 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:00 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:00 +0100] "GET /fwe.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:00 +0100] "GET /images/m.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:01 +0100] "GET /g.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:01 +0100] "GET /tx1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:01 +0100] "GET /xv.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:02 +0100] "GET /x56.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:02 +0100] "GET /htaccess.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:02 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:03 +0100] "GET /x50.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:03 +0100] "GET /fv.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:03 +0100] "GET /file.php? HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:04 +0100] "GET /lsd.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:04 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:05 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:05 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:06 +0100] "GET /atx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:06 +0100] "GET /z60.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:06 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:07 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:07 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:07 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:08 +0100] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:08 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:08 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:09 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:10 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:10 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:10 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:10 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:11 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:11 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:11 +0100] "GET /0x.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:12 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:12 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:12 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:13 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:13 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:13 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:14 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:14 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:14 +0100] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:15 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:15 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:15 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:16 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:16 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:16 +0100] "GET /plugins/Cache/footer.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:17 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:17 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:17 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:18 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:18 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:18 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:19 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:19 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:19 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:20 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:20 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:20 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:21 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:21 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:22 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:22 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:22 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:23 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:23 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:23 +0100] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:24 +0100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:24 +0100] "GET /ww1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:24 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:25 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:25 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:25 +0100] "GET /css/colors/blue/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:26 +0100] "GET /security.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:26 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:27 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:27 +0100] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:27 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:28 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:28 +0100] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:29 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:29 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:29 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:30 +0100] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:30 +0100] "GET /.well-known/log.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:31 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:31 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:31 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:32 +0100] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:33 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:33 +0100] "GET /ioxi-o1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:33 +0100] "GET /juuuu.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:34 +0100] "GET /ha.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:34 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:34 +0100] "GET /we2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:35 +0100] "GET /04.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:35 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:35 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:36 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:36 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:36 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:37 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:37 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:38 +0100] "GET /ave.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:38 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:39 +0100] "GET /bibil.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:39 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:39 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:40 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:40 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:40 +0100] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:41 +0100] "GET /nox.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:41 +0100] "GET /file48.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:41 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:42 +0100] "GET /class9.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:42 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:42 +0100] "GET /bless11.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:43 +0100] "GET /ccou.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:43 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:43 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:44 +0100] "GET /ac.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:44 +0100] "GET /new4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:44 +0100] "GET /pop.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:45 +0100] "GET /az.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:45 +0100] "GET /xaz.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:45 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:46 +0100] "GET /1aa.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:46 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:47 +0100] "GET /wtz.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:47 +0100] "GET /galex.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:47 +0100] "GET /xb.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:48 +0100] "GET /ova.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:48 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.150 - - [03/Feb/2026:22:52:49 +0100] "GET /rh.php HTTP/1.1" 301 162 "-" "-" 104.23.223.110 - - [04/Feb/2026:03:33:11 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 104.23.223.110 - - [04/Feb/2026:03:35:07 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.223.110 - - [04/Feb/2026:03:36:04 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 141.101.86.105 - - [04/Feb/2026:06:34:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 141.101.87.28 - - [04/Feb/2026:06:34:02 +0100] "GET /166.php HTTP/1.1" 301 162 "-" "-" 141.101.87.28 - - [04/Feb/2026:06:34:03 +0100] "GET /2026.php HTTP/1.1" 301 162 "-" "-" 141.101.87.28 - - [04/Feb/2026:06:34:03 +0100] "GET /muzu.php HTTP/1.1" 301 162 "-" "-" 141.101.87.28 - - [04/Feb/2026:06:34:03 +0100] "GET /reze.php HTTP/1.1" 301 162 "-" "-" 141.101.87.28 - - [04/Feb/2026:06:34:04 +0100] "GET /jsond.php HTTP/1.1" 301 162 "-" "-" 141.101.87.28 - - [04/Feb/2026:06:34:04 +0100] "GET /x7.php HTTP/1.1" 301 162 "-" "-" 141.101.87.28 - - [04/Feb/2026:06:34:04 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:05 +0100] "GET //lala.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:05 +0100] "GET /8xyz.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:06 +0100] "GET /wsd.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:06 +0100] "GET /Update/f35.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:07 +0100] "GET /la.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:07 +0100] "GET /Wp-good.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:08 +0100] "GET /tphp.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:08 +0100] "GET /a1.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:08 +0100] "GET /nyan.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:09 +0100] "GET //autoload_classmap.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:09 +0100] "GET //alfa.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:10 +0100] "GET //wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:10 +0100] "GET /luxe.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:10 +0100] "GET /update/wpupex.php/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:11 +0100] "GET /rezor.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:11 +0100] "GET //doc.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:12 +0100] "GET //wp-admin/user/index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:12 +0100] "GET //wp-includes/css/about.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:12 +0100] "GET //install.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:13 +0100] "GET /~norapump/hah.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:13 +0100] "GET /sto.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:13 +0100] "GET //x.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:13 +0100] "GET //test.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:14 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:14 +0100] "GET /n3.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:15 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:15 +0100] "GET /o.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:15 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:16 +0100] "GET /class-t.api.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:16 +0100] "GET /.trash7309/f/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:16 +0100] "GET //wp.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:16 +0100] "GET //wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:17 +0100] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:17 +0100] "GET //h.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:17 +0100] "GET //skin/install/default/security.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:18 +0100] "GET /wrt.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:18 +0100] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:18 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:19 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:19 +0100] "GET /png.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:19 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:20 +0100] "GET //zwso.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:20 +0100] "GET //wp-content/languages/index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:21 +0100] "GET //wp-content/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:21 +0100] "GET /wp/wp-includes//index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:21 +0100] "GET /ton.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:22 +0100] "GET //wso.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:22 +0100] "GET /images/fk2e3/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:22 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:23 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:23 +0100] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:23 +0100] "GET /sxo.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:23 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:24 +0100] "GET //wp-content/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:24 +0100] "GET /mans.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:24 +0100] "GET //dropdown.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:25 +0100] "GET /WordPress/x/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:26 +0100] "GET /ze.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:26 +0100] "GET //geck.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:26 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:26 +0100] "GET //admin/function.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:27 +0100] "GET //index/function.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:27 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:27 +0100] "GET /ftp.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:27 +0100] "GET /mds.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:28 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:28 +0100] "GET //wp-admin/class-db.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:28 +0100] "GET /cool.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:29 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:29 +0100] "GET //simple.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:29 +0100] "GET //elp.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:30 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:30 +0100] "GET //wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:30 +0100] "GET //inputs.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:31 +0100] "GET /.trash7309/fafa/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:31 +0100] "GET /system.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:32 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:33 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:33 +0100] "GET /museu/yhweq.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:33 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:34 +0100] "GET //w.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:34 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:35 +0100] "GET /gib.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:35 +0100] "GET /wp-miiss.php.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:35 +0100] "GET /ho/wpup.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:36 +0100] "GET //moon.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:36 +0100] "GET /filesss.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:37 +0100] "GET /hey.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:37 +0100] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:38 +0100] "GET //1337.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:38 +0100] "GET //buy.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:38 +0100] "GET /apsarasarts/okk.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:39 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:39 +0100] "GET /wp-is.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:40 +0100] "GET /jmfi2.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:40 +0100] "GET //about/function.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:41 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:41 +0100] "GET //wp-content/json.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:41 +0100] "GET /hzz.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:42 +0100] "GET //shell20211028.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:42 +0100] "GET //content.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:43 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:43 +0100] "GET /ps.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:44 +0100] "GET //wp-content/themes/about.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:44 +0100] "GET /.trash7309/dd/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:45 +0100] "GET /cache.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:45 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:46 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:46 +0100] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:47 +0100] "GET //user.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:47 +0100] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:48 +0100] "GET //index/function.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:48 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:49 +0100] "GET /rip.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:49 +0100] "GET /wp4.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:50 +0100] "GET //403.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:50 +0100] "GET //wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:51 +0100] "GET /asd67.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:51 +0100] "GET //sad/about.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:52 +0100] "GET /oivcl.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:52 +0100] "GET //about.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:52 +0100] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:53 +0100] "GET /v2.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:53 +0100] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:54 +0100] "GET /x/ HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:54 +0100] "GET //.cache/x.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:55 +0100] "GET /dr.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:55 +0100] "GET /raw.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:55 +0100] "GET //wp-includes/css/about.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:56 +0100] "GET //wp-content/index.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:57 +0100] "GET /ioxi-o2.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:57 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:58 +0100] "GET /dlu.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:58 +0100] "GET //wp-content/about.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:58 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:58 +0100] "GET /packed.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:59 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:59 +0100] "GET //404.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:34:59 +0100] "GET /des.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:35:00 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "-" 141.101.86.105 - - [04/Feb/2026:06:35:00 +0100] "GET //lufix.php HTTP/1.1" 301 162 "-" "-" 162.158.217.84 - - [04/Feb/2026:07:38:07 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.141.34 - - [04/Feb/2026:07:42:54 +0100] "GET / HTTP/1.1" 301 162 "immopoint-frankfurt.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 162.158.88.110 - - [04/Feb/2026:07:43:56 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 172.71.141.34 - - [04/Feb/2026:07:49:06 +0100] "GET /wp-includes/ID3/license.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.141.34 - - [04/Feb/2026:07:57:09 +0100] "GET /wp-includes/ID3/license.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.141.34 - - [04/Feb/2026:08:04:53 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.71.82.83 - - [04/Feb/2026:08:06:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.170.250 - - [04/Feb/2026:08:06:09 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 162.158.170.34 - - [04/Feb/2026:08:06:09 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.170.34 - - [04/Feb/2026:08:06:10 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.170.34 - - [04/Feb/2026:08:06:10 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.170.34 - - [04/Feb/2026:08:06:11 +0100] "GET /user/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.170.34 - - [04/Feb/2026:08:06:11 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.170.34 - - [04/Feb/2026:08:06:12 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.170.34 - - [04/Feb/2026:08:06:12 +0100] "GET /register HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.170.34 - - [04/Feb/2026:08:06:12 +0100] "GET /admin HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 162.158.170.34 - - [04/Feb/2026:08:06:13 +0100] "GET /login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.70.94.173 - - [04/Feb/2026:08:53:29 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.146.75 - - [04/Feb/2026:10:10:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 172.71.147.173 - - [04/Feb/2026:10:10:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 162.158.42.75 - - [04/Feb/2026:10:51:50 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.151.65 - - [04/Feb/2026:10:55:06 +0100] "GET /captionsetup-options.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.71.126.61 - - [04/Feb/2026:12:27:03 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 104.22.1.198 - - [04/Feb/2026:13:31:22 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.24.143 - - [04/Feb/2026:13:45:03 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.168.109 - - [04/Feb/2026:13:56:56 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.68.12.196 - - [04/Feb/2026:14:02:16 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.172.11 - - [04/Feb/2026:15:37:55 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.182.7 - - [04/Feb/2026:16:46:33 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.23.221.136 - - [04/Feb/2026:17:34:04 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 104.23.175.156 - - [04/Feb/2026:19:16:39 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.71.232.81 - - [04/Feb/2026:19:50:18 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.135.16 - - [04/Feb/2026:19:50:19 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.50.159 - - [04/Feb/2026:22:29:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 104.23.223.111 - - [05/Feb/2026:00:49:47 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 104.23.221.136 - - [05/Feb/2026:00:50:44 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.70.243.173 - - [05/Feb/2026:01:56:23 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 162.158.6.151 - - [05/Feb/2026:02:19:36 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.6.19 - - [05/Feb/2026:02:19:36 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "-" 162.158.6.19 - - [05/Feb/2026:02:19:37 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:37 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:37 +0100] "GET /prv8.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:38 +0100] "GET /shlo.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:38 +0100] "GET /itil.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:38 +0100] "GET /jack.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:39 +0100] "GET /sudo.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:39 +0100] "GET /law.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:39 +0100] "GET /wp-xx.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:40 +0100] "GET /st.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:40 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:41 +0100] "GET /oxse.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:41 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:41 +0100] "GET /AxAo.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:42 +0100] "GET /assacc.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:42 +0100] "GET /men.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:42 +0100] "GET /test2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:43 +0100] "GET /v4.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:43 +0100] "GET /wo.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:43 +0100] "GET /whm-cp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:44 +0100] "GET /pu.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:44 +0100] "GET /resp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:44 +0100] "GET /za2.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:45 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:45 +0100] "GET /gmanz.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:45 +0100] "GET /zzz.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:46 +0100] "GET /codehu.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:46 +0100] "GET /resp.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:46 +0100] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:47 +0100] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:47 +0100] "GET /wp-includes/Requests/library/shlo.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:47 +0100] "GET /jga.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:48 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:48 +0100] "GET /bs5.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:48 +0100] "GET /ednse.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:48 +0100] "GET /fs.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:49 +0100] "GET /niett.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:49 +0100] "GET /puibr.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:49 +0100] "GET /past1.php HTTP/1.1" 301 162 "-" "-" 162.158.6.151 - - [05/Feb/2026:02:19:50 +0100] "GET /smp.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:02 +0100] "GET /ah25.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:02 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:03 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:04 +0100] "GET /wefile.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:04 +0100] "GET /155.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:05 +0100] "GET /black.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:06 +0100] "GET /global.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:06 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:07 +0100] "GET /tool.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:07 +0100] "GET /thoms.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:08 +0100] "GET /img.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:09 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:09 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:10 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:11 +0100] "GET /menu.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:11 +0100] "GET /browse.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:12 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:12 +0100] "GET /co.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:13 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:14 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:15 +0100] "GET /public/vx.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:15 +0100] "GET /bnm.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:16 +0100] "GET /edit-tags.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:17 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:18 +0100] "GET /gfd.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:18 +0100] "GET /wp-content/radio.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.235.26 - - [05/Feb/2026:06:00:19 +0100] "GET /error_log.php HTTP/1.1" 301 162 "-" "-" 172.69.151.200 - - [05/Feb/2026:06:10:14 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.23.239.81 - - [05/Feb/2026:06:10:15 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.22.1.198 - - [05/Feb/2026:07:12:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.184.207 - - [05/Feb/2026:07:49:15 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.69.50.159 - - [05/Feb/2026:07:49:20 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 172.71.103.115 - - [05/Feb/2026:07:54:25 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.71.99.63 - - [05/Feb/2026:07:54:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 104.23.168.109 - - [05/Feb/2026:11:20:11 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 104.22.1.199 - - [05/Feb/2026:12:38:39 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.24.143 - - [05/Feb/2026:14:38:46 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.23.230 - - [05/Feb/2026:14:56:16 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:17 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.22.123 - - [05/Feb/2026:14:56:17 +0100] "GET /O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.22.123 - - [05/Feb/2026:14:56:17 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.22.123 - - [05/Feb/2026:14:56:18 +0100] "GET /zwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.22.123 - - [05/Feb/2026:14:56:18 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.22.123 - - [05/Feb/2026:14:56:18 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.22.123 - - [05/Feb/2026:14:56:18 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.22.123 - - [05/Feb/2026:14:56:19 +0100] "GET /.well-known/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.22.123 - - [05/Feb/2026:14:56:19 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.22.123 - - [05/Feb/2026:14:56:19 +0100] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.22.123 - - [05/Feb/2026:14:56:20 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.22.123 - - [05/Feb/2026:14:56:20 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.22.123 - - [05/Feb/2026:14:56:20 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.22.123 - - [05/Feb/2026:14:56:21 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.22.123 - - [05/Feb/2026:14:56:21 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.22.123 - - [05/Feb/2026:14:56:21 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:21 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:22 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:22 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:22 +0100] "GET /update/f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:23 +0100] "GET /wp-content/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:23 +0100] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:23 +0100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:24 +0100] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:24 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:24 +0100] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:24 +0100] "GET /images/upload.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:56:25 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:56:25 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:25 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:26 +0100] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:26 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:26 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:27 +0100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:27 +0100] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:56:27 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:27 +0100] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:56:28 +0100] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:28 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:28 +0100] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:56:29 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:56:29 +0100] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:56:29 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:29 +0100] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:30 +0100] "GET /js/bas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:30 +0100] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:30 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:31 +0100] "GET /wp-includes/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:56:31 +0100] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:56:31 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:32 +0100] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:32 +0100] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:32 +0100] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:56:33 +0100] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:33 +0100] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:33 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:33 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:34 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:56:34 +0100] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:34 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:35 +0100] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:56:35 +0100] "GET /files/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:35 +0100] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:36 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:56:36 +0100] "GET /wp-content/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:56:36 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:37 +0100] "GET /cgi-bin/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:37 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:56:37 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:38 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:56:38 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:38 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:38 +0100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:39 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:39 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:39 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:40 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:40 +0100] "GET /wp-admin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:40 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:41 +0100] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:56:41 +0100] "GET /wp-l0gin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:41 +0100] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:41 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:42 +0100] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:42 +0100] "GET /wp-includes/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:42 +0100] "GET /images/DJP9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:43 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:43 +0100] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:43 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:44 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:56:44 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:44 +0100] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:56:44 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:45 +0100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:56:45 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:45 +0100] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:46 +0100] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:46 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:46 +0100] "GET /wp-content/languages/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:46 +0100] "GET /update/403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:47 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:47 +0100] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:47 +0100] "GET /wp-includes/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:56:48 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:48 +0100] "GET /wp-admin/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:48 +0100] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:49 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:49 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:49 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:49 +0100] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:50 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:50 +0100] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:50 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:51 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:56:51 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:51 +0100] "GET /templates/beez3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:52 +0100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:52 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:52 +0100] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:53 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:53 +0100] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:53 +0100] "GET /templates/beez/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:53 +0100] "GET /bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:54 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:54 +0100] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:54 +0100] "GET /wp-content/product.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:56:55 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:55 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:55 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:56:56 +0100] "GET /css/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:56 +0100] "GET /init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:56 +0100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:57 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:56:57 +0100] "GET /wp-includes/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:57 +0100] "GET /assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:57 +0100] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:56:58 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:58 +0100] "GET /css/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:56:58 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:59 +0100] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:56:59 +0100] "GET /wp_wlx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:56:59 +0100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:57:00 +0100] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:00 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:00 +0100] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:00 +0100] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:01 +0100] "GET /wp-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:01 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:57:02 +0100] "GET /Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:57:02 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:02 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:02 +0100] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:03 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:03 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:03 +0100] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:04 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:04 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:57:04 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:05 +0100] "GET /wp-admin/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:57:05 +0100] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:05 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:57:06 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:06 +0100] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:06 +0100] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:57:07 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:07 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:07 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:07 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:08 +0100] "GET /images/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:57:08 +0100] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:08 +0100] "GET /web.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:57:09 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:09 +0100] "GET /images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:57:09 +0100] "GET /wp-content/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:10 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:57:10 +0100] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:57:10 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:10 +0100] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:11 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:11 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:11 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:12 +0100] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:12 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:57:12 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:13 +0100] "GET /ms-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:57:13 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:13 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:13 +0100] "GET /wp-includes/infi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:14 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:14 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:57:14 +0100] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:15 +0100] "GET /css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:15 +0100] "GET /images/index22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:57:15 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:16 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:57:16 +0100] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:16 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:17 +0100] "GET /special.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:17 +0100] "GET /assets/script.js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:17 +0100] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:17 +0100] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:57:18 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:18 +0100] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:18 +0100] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:19 +0100] "GET /cgi-bin/class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:19 +0100] "GET /wp-content/cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:19 +0100] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:20 +0100] "GET /wp-includes/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:20 +0100] "GET /webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:20 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:20 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:21 +0100] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:21 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:21 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:57:22 +0100] "GET /wp-includes/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:22 +0100] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:22 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:22 +0100] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:57:23 +0100] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:23 +0100] "GET /wp-admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:57:23 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:57:24 +0100] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:24 +0100] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:24 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:57:25 +0100] "GET /wp-admin/user/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:57:25 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:25 +0100] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:26 +0100] "GET /wp-includes/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:26 +0100] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:26 +0100] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:26 +0100] "GET /xp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:27 +0100] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:27 +0100] "GET /wp-includes/assets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:27 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:57:28 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:57:28 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:28 +0100] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:29 +0100] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:57:29 +0100] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:29 +0100] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:30 +0100] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:57:30 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:30 +0100] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:57:31 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:14:57:31 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:57:31 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:57:32 +0100] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:57:32 +0100] "GET /webadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:32 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:57:32 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:33 +0100] "GET /xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:57:33 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:33 +0100] "GET /wp-admin/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:57:34 +0100] "GET /templates/beez3/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:57:34 +0100] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:34 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:35 +0100] "GET /wp-includes/assets/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:35 +0100] "GET /cgi-bin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:35 +0100] "GET /wp-content/uploads/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:14:57:36 +0100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:36 +0100] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:36 +0100] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:36 +0100] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:37 +0100] "GET /warm.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:37 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:37 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:57:38 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:57:38 +0100] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:38 +0100] "GET /blog/wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:57:39 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:39 +0100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:39 +0100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:57:40 +0100] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:40 +0100] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:40 +0100] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:41 +0100] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:57:41 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:41 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:41 +0100] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:42 +0100] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:57:42 +0100] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:42 +0100] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:57:43 +0100] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:43 +0100] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:43 +0100] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:44 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:44 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:44 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:14:57:45 +0100] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:45 +0100] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:45 +0100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:46 +0100] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:46 +0100] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:46 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:47 +0100] "GET /blog/wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:47 +0100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:47 +0100] "GET /blog/wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:47 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:57:48 +0100] "GET /wp-includes/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:48 +0100] "GET /cgi-bin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:48 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:49 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:49 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:49 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:50 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:50 +0100] "GET /.alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:50 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:51 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:57:51 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:57:51 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:51 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:57:52 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:52 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:52 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:53 +0100] "GET /setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:53 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:53 +0100] "GET /.well-known/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:57:54 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:54 +0100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:57:54 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:55 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:55 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:55 +0100] "GET /ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:57:56 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:56 +0100] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:56 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:56 +0100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:57:57 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:57 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:57:57 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:58 +0100] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:57:58 +0100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:58 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:57:59 +0100] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:57:59 +0100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:57:59 +0100] "GET /js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:00 +0100] "GET /wp-admin/images/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:58:00 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:00 +0100] "GET /wp-content/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:00 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:01 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:01 +0100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:01 +0100] "GET /adminfuns.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:58:02 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:02 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:02 +0100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:03 +0100] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:58:03 +0100] "GET /admin/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:03 +0100] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:58:04 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:04 +0100] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:04 +0100] "GET /wp-includes/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:58:05 +0100] "GET /wp-includes/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:05 +0100] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:05 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:06 +0100] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:06 +0100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:06 +0100] "GET /wp-admin/network/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:06 +0100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:07 +0100] "GET /customize.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:07 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:07 +0100] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:58:08 +0100] "GET /lock.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:08 +0100] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:08 +0100] "GET /wp-includes/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:09 +0100] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:09 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:09 +0100] "GET /.well-known/wincust.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:10 +0100] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:10 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:58:10 +0100] "GET /wp-includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:10 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:11 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:11 +0100] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:11 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:12 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:12 +0100] "GET /fonts/database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:12 +0100] "GET /ff2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:13 +0100] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:13 +0100] "GET /wp-admin/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:13 +0100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:14 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:14 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:14 +0100] "GET /wp-admin/css/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:15 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:15 +0100] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:15 +0100] "GET /assets/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:15 +0100] "GET /wp-content/plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:16 +0100] "GET /js/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:16 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:16 +0100] "GET /worm.PhP HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:17 +0100] "GET /ext.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:58:17 +0100] "GET /delpaths.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:17 +0100] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:18 +0100] "GET /wp-includes/bk/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:58:18 +0100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:14:58:18 +0100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:19 +0100] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:19 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:19 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:20 +0100] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:20 +0100] "GET /update-core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:58:20 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:58:21 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:21 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:21 +0100] "GET /wp-admin/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:21 +0100] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:22 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:22 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:22 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:58:23 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:23 +0100] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:23 +0100] "GET /assets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:58:24 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:24 +0100] "GET /index2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:24 +0100] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:25 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:58:25 +0100] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:58:25 +0100] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:25 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:26 +0100] "GET /.well-known/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:58:26 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:26 +0100] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:27 +0100] "GET /.well-known/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:58:27 +0100] "GET /hehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:27 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:14:58:28 +0100] "GET /css/slider.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:28 +0100] "GET /dir.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:28 +0100] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:29 +0100] "GET /wp-content/style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:29 +0100] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:29 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:30 +0100] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:30 +0100] "GET /filefuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:30 +0100] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:31 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:31 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:58:31 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:32 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:32 +0100] "GET /contacts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:32 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:32 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:58:33 +0100] "GET /firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:33 +0100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:33 +0100] "GET /wp-content/uploads/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:34 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:34 +0100] "GET /images/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:58:35 +0100] "GET /wp-admin/maint/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:35 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:35 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:35 +0100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:36 +0100] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:36 +0100] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:36 +0100] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:37 +0100] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:37 +0100] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:37 +0100] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:38 +0100] "GET /tox.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:38 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:38 +0100] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:39 +0100] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:39 +0100] "GET /tiny.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:58:39 +0100] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:58:40 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:58:40 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:40 +0100] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:41 +0100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:41 +0100] "GET /mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:41 +0100] "GET /waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:42 +0100] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:42 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:42 +0100] "GET /wp-admin/css/glex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:42 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:43 +0100] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:43 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:43 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:44 +0100] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:44 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:44 +0100] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:45 +0100] "GET /theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:45 +0100] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:58:45 +0100] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:58:46 +0100] "GET /Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:58:46 +0100] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:46 +0100] "GET /wp-admin/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:46 +0100] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:47 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:47 +0100] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:47 +0100] "GET /css/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:48 +0100] "GET /images/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:48 +0100] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:48 +0100] "GET /small.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:49 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:49 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:49 +0100] "GET /wp-content/uploads/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:50 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:58:50 +0100] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:58:50 +0100] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:50 +0100] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:58:51 +0100] "GET /wp-files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:51 +0100] "GET /functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:58:51 +0100] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:52 +0100] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:52 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:58:52 +0100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:53 +0100] "GET /aks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:53 +0100] "GET /litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:53 +0100] "GET /img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:54 +0100] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:54 +0100] "GET /wpn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:58:54 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:55 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:55 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:14:58:55 +0100] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:56 +0100] "GET /wp-includes/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:58:56 +0100] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:56 +0100] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:57 +0100] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:58:57 +0100] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:58:57 +0100] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:57 +0100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:58:58 +0100] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:58 +0100] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:58 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:59 +0100] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:58:59 +0100] "GET /fog/management/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:58:59 +0100] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:00 +0100] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:59:00 +0100] "GET /images/wp-aespa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:00 +0100] "GET /wp-includes/Text/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:01 +0100] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:59:01 +0100] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:01 +0100] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:02 +0100] "GET /anonse/lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:02 +0100] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:02 +0100] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:03 +0100] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:03 +0100] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:03 +0100] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:04 +0100] "GET /.well-known/save.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:04 +0100] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:59:04 +0100] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:05 +0100] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:05 +0100] "GET /uploads/af32.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:59:05 +0100] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:59:05 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:06 +0100] "GET /wp-fmfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:06 +0100] "GET /.trash7309/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:06 +0100] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:59:07 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:59:07 +0100] "GET /memberfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:07 +0100] "GET /infos.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:14:59:08 +0100] "GET /modules/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:08 +0100] "GET /wp-content/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:08 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:09 +0100] "GET /options-writing.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:09 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:09 +0100] "GET /wsad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:10 +0100] "GET /nation.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:10 +0100] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:10 +0100] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:10 +0100] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:11 +0100] "GET /autoload_classmap/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:11 +0100] "GET /wp-atomx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:59:11 +0100] "GET /admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:12 +0100] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:12 +0100] "GET /XxX.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:12 +0100] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:13 +0100] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:13 +0100] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:59:13 +0100] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:14 +0100] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:14 +0100] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:14 +0100] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:15 +0100] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:59:15 +0100] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:15 +0100] "GET /css/media-widget-vide02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:15 +0100] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:16 +0100] "GET /images/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:16 +0100] "GET /templates/beez3/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:16 +0100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:59:17 +0100] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:59:17 +0100] "GET /plugins/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:17 +0100] "GET /.well-known/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:18 +0100] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:18 +0100] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:18 +0100] "GET /autoload_classmap/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:19 +0100] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:19 +0100] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:19 +0100] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:20 +0100] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:20 +0100] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:20 +0100] "GET /wp-includes/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:20 +0100] "GET /xex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:59:21 +0100] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:21 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:21 +0100] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:22 +0100] "GET /upload/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:22 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:14:59:22 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:23 +0100] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:23 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:23 +0100] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:24 +0100] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:24 +0100] "GET /images/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:59:24 +0100] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:14:59:25 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:25 +0100] "GET /.well-known/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:25 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:59:25 +0100] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:59:26 +0100] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:26 +0100] "GET /xp.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:26 +0100] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:27 +0100] "GET /wp-content/bypass_1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:27 +0100] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:27 +0100] "GET /admin/user_data.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:59:28 +0100] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:28 +0100] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:28 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:59:29 +0100] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:29 +0100] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:59:29 +0100] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:30 +0100] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:30 +0100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:59:30 +0100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:59:31 +0100] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:31 +0100] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:31 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:32 +0100] "GET /wp-header.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:32 +0100] "GET /file.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:59:32 +0100] "GET /.tmb/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:33 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:33 +0100] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:59:33 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:59:33 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:34 +0100] "GET /adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:59:34 +0100] "GET /js/js1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:34 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:35 +0100] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:59:35 +0100] "GET /images/habhan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:35 +0100] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:36 +0100] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:36 +0100] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:36 +0100] "GET /about/function.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:37 +0100] "GET /routes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:37 +0100] "GET /wp-includes/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:37 +0100] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:38 +0100] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:59:38 +0100] "GET /f35_SpaceTn.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:59:38 +0100] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:14:59:38 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:39 +0100] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:59:39 +0100] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:39 +0100] "GET /wp-includes/category-double.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:40 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:40 +0100] "GET /blog/signatur.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:40 +0100] "GET /wp-includes/assets/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:41 +0100] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:41 +0100] "GET /include/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:41 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:42 +0100] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:42 +0100] "GET /js/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:42 +0100] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:43 +0100] "GET /about/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:14:59:43 +0100] "GET /file/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:43 +0100] "GET /function/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:59:43 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:44 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:44 +0100] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:44 +0100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:45 +0100] "GET /plugin-install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:45 +0100] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:45 +0100] "GET /wp-admin/js/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:46 +0100] "GET /images/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:46 +0100] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:46 +0100] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:47 +0100] "GET /wp-includes/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:47 +0100] "GET /wp-content/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:47 +0100] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:48 +0100] "GET /wp-includes/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:59:48 +0100] "GET /wp-includes/customize/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:48 +0100] "GET /css/fan.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:49 +0100] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:59:49 +0100] "GET /images/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:49 +0100] "GET /wp-content/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:49 +0100] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:14:59:50 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:14:59:50 +0100] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:50 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:59:51 +0100] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:51 +0100] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:51 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:52 +0100] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:59:52 +0100] "GET /.well-known/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:52 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:53 +0100] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:53 +0100] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:53 +0100] "GET /css/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:54 +0100] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:54 +0100] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:54 +0100] "GET /wsax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:14:59:55 +0100] "GET /bless.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:55 +0100] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:55 +0100] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:14:59:56 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:14:59:56 +0100] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:56 +0100] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:57 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:14:59:57 +0100] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:59:57 +0100] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:58 +0100] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:58 +0100] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:14:59:58 +0100] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:14:59:58 +0100] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:14:59:59 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:14:59:59 +0100] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:14:59:59 +0100] "GET /uploads/xsec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:00 +0100] "GET /images/Marvins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:00 +0100] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:00 +0100] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:01 +0100] "GET /wp-content/languages/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:01 +0100] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:02 +0100] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:02 +0100] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:02 +0100] "GET /admin.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:00:03 +0100] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:03 +0100] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:03 +0100] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:04 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:04 +0100] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:04 +0100] "GET /wp-admin/network/class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:05 +0100] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:05 +0100] "GET /wp-includes/ms-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:00:05 +0100] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:06 +0100] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:06 +0100] "GET /images/news_event/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:06 +0100] "GET /chosen.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:15:00:07 +0100] "GET /bs1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:07 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:07 +0100] "GET /wp-includes/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:00:08 +0100] "GET /page.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:08 +0100] "GET /wp-admin/includes/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:08 +0100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:09 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:09 +0100] "GET /wp-content/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:09 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:00:10 +0100] "GET /assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:10 +0100] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:00:10 +0100] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:11 +0100] "GET /wp-content/1.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:11 +0100] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:11 +0100] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:15:00:12 +0100] "GET /wp-includes/assets/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:15:00:12 +0100] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:12 +0100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:00:13 +0100] "GET /images/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:13 +0100] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:13 +0100] "GET /x/test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:14 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:14 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:00:14 +0100] "GET /wp-admin/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:15 +0100] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:15 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:15 +0100] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:16 +0100] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:16 +0100] "GET /shop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:16 +0100] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:16 +0100] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:17 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:17 +0100] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:17 +0100] "GET /wp-admin/user/header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:18 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:00:18 +0100] "GET /wp-api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:18 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:00:19 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:19 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:15:00:19 +0100] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:20 +0100] "GET /wp-includes/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:20 +0100] "GET /images/fm.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:20 +0100] "GET /wp-includes/count.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:15:00:21 +0100] "GET /wp-error_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:21 +0100] "GET /assets/class_update_plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:21 +0100] "GET /wp-admin/network/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:22 +0100] "GET /templates/beez5/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:22 +0100] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:22 +0100] "GET /js/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:00:23 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:23 +0100] "GET /assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:23 +0100] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:00:23 +0100] "GET /images/stories/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:24 +0100] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:24 +0100] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:00:24 +0100] "GET /home/O-Simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:25 +0100] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:25 +0100] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:25 +0100] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:26 +0100] "GET /style.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:00:26 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:26 +0100] "GET /wp-content/themes/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:00:27 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:27 +0100] "GET /saka.phP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:27 +0100] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:00:28 +0100] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:28 +0100] "GET /baxa1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:28 +0100] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:29 +0100] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:29 +0100] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:29 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:00:30 +0100] "GET /about/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:30 +0100] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:30 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:30 +0100] "GET /images/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:15:00:31 +0100] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:31 +0100] "GET /js/mrx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:31 +0100] "GET /wp-includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:32 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:32 +0100] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:32 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:15:00:33 +0100] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:33 +0100] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:15:00:33 +0100] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:34 +0100] "GET /upload/bilder/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:34 +0100] "GET /fonts/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:34 +0100] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:35 +0100] "GET /entrepreneuse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:15:00:35 +0100] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:35 +0100] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:35 +0100] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:36 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:36 +0100] "GET /js/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:36 +0100] "GET /.well-known/buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:37 +0100] "GET /index/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:37 +0100] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:00:37 +0100] "GET /function/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:38 +0100] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:38 +0100] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:38 +0100] "GET /testt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:39 +0100] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:39 +0100] "GET /wp-admin/js/sad.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:00:39 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:40 +0100] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:00:40 +0100] "GET /web/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:40 +0100] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:40 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:41 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:41 +0100] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:41 +0100] "GET /wikindex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:00:42 +0100] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:42 +0100] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:00:42 +0100] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:00:43 +0100] "GET /wp-content/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:43 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:43 +0100] "GET /wp-includes/js/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:15:00:44 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:44 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:44 +0100] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:44 +0100] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:45 +0100] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:45 +0100] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:45 +0100] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:46 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:46 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:00:46 +0100] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:47 +0100] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:47 +0100] "GET /wp-content/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:47 +0100] "GET /css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:15:00:48 +0100] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:48 +0100] "GET /wp-content/raw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:00:48 +0100] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:48 +0100] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:49 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:49 +0100] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:49 +0100] "GET /wp-admin/media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:00:50 +0100] "GET /media-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:50 +0100] "GET /js/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:00:50 +0100] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:51 +0100] "GET /admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:51 +0100] "GET /wp-includes/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:51 +0100] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:51 +0100] "GET /wp-admin/js/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:52 +0100] "GET /pages.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:15:00:52 +0100] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:52 +0100] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:53 +0100] "GET /uploads/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:53 +0100] "GET /assets/js/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:53 +0100] "GET /assets/comfunctions.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:54 +0100] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:00:54 +0100] "GET /css/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:54 +0100] "GET /adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:00:55 +0100] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:55 +0100] "GET /images/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:00:55 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:56 +0100] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:00:56 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:56 +0100] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:57 +0100] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:57 +0100] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:57 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:57 +0100] "GET /assets/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:00:58 +0100] "GET /autoload_classmap/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:58 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:58 +0100] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:59 +0100] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:00:59 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:00:59 +0100] "GET /wp-admin/item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:00 +0100] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:01:00 +0100] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:00 +0100] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:01 +0100] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:01 +0100] "GET /ms-users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:01 +0100] "GET /wp-admin/js/cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:02 +0100] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:02 +0100] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:02 +0100] "GET /css/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:03 +0100] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:01:03 +0100] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:03 +0100] "GET /assets/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:04 +0100] "GET /fm.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:04 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:04 +0100] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:05 +0100] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:05 +0100] "GET /assets/images/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:05 +0100] "GET /wp-includes/log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:05 +0100] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:15:01:06 +0100] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:06 +0100] "GET /wp-includes/aw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:06 +0100] "GET /update/gely.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:07 +0100] "GET /uploads/c99shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:07 +0100] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:08 +0100] "GET /uploads/lala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:08 +0100] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:08 +0100] "GET /wp-includes/css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:01:08 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:09 +0100] "GET /top.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:09 +0100] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:01:09 +0100] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:01:10 +0100] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:10 +0100] "GET /wp-content/click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:01:11 +0100] "GET /wp-includes/template-less.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:11 +0100] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:01:11 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:12 +0100] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:12 +0100] "GET /retu11.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:12 +0100] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:01:13 +0100] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:13 +0100] "GET /js/1.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:13 +0100] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:13 +0100] "GET /wp-includes/assets/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:14 +0100] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:14 +0100] "GET /backup/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:01:14 +0100] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:01:15 +0100] "GET /wp-includes/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:01:15 +0100] "GET /wp-content/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:15 +0100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:01:16 +0100] "GET /worm0.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:01:16 +0100] "GET /wp-includes/load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:01:16 +0100] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:15:01:17 +0100] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:17 +0100] "GET /images/c99.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:01:17 +0100] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:17 +0100] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:01:18 +0100] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:18 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:18 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:19 +0100] "GET /wp-content/uploads/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:19 +0100] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:19 +0100] "GET /type.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:20 +0100] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:01:20 +0100] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:01:20 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:20 +0100] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:01:21 +0100] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:21 +0100] "GET /css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:21 +0100] "GET /css/hekokstyle.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:22 +0100] "GET /wp-admin/user/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:22 +0100] "GET /files/shares/403ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:15:01:22 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:01:23 +0100] "GET /images/fix.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:23 +0100] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:23 +0100] "GET /files.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:24 +0100] "GET /wp-includes/assets/system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:15:01:24 +0100] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:24 +0100] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:25 +0100] "GET /images/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:25 +0100] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:25 +0100] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:25 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:26 +0100] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:15:01:26 +0100] "GET /img/chat-search.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:26 +0100] "GET /wp-includes/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:01:27 +0100] "GET /wp-includes/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:15:01:27 +0100] "GET /wp-includes/assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:01:27 +0100] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:28 +0100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:28 +0100] "GET /wp-includes/l10n/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:01:28 +0100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:29 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:29 +0100] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:29 +0100] "GET /wp-includes/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:30 +0100] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:30 +0100] "GET /wp-content/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:31 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:15:01:31 +0100] "GET /wp-admin/network/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:31 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:31 +0100] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:32 +0100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:32 +0100] "GET /wp-includes/id3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:32 +0100] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:33 +0100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:33 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:33 +0100] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:34 +0100] "GET /blog/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:34 +0100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:34 +0100] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:35 +0100] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:15:01:35 +0100] "GET /wp-content/upgrade/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:01:35 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:36 +0100] "GET /assets/css/dist/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:36 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:36 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:15:01:37 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:37 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:15:01:37 +0100] "GET /wp-admin/js/widget/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:37 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:01:38 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:38 +0100] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:38 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:01:39 +0100] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:39 +0100] "GET /wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:39 +0100] "GET /ALFA_DATA/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:15:01:40 +0100] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:40 +0100] "GET /wp-includes/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:01:40 +0100] "GET /wp-includes/ID3 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:41 +0100] "GET /wp-includes/blocks/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:41 +0100] "GET /wp-includes/certificates/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:41 +0100] "GET /wp-admin/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:42 +0100] "GET /wp-admin/maint/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:42 +0100] "GET /wp-admin/meta/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:01:42 +0100] "GET /wp-admin/user/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:42 +0100] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:43 +0100] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:43 +0100] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.158.23.230 - - [05/Feb/2026:15:01:43 +0100] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:44 +0100] "GET /upload/image/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:44 +0100] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:01:44 +0100] "GET /wordpress/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:45 +0100] "GET /blog/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:45 +0100] "GET /sites/default/files/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:01:45 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:46 +0100] "GET /admin/editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:46 +0100] "GET /admin/images/slider/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:46 +0100] "GET /admin/tmp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:46 +0100] "GET /admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:47 +0100] "GET /Admin/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:47 +0100] "GET /admin/uploads/images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:01:47 +0100] "GET /administrator/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:48 +0100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:01:48 +0100] "GET /assets/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:48 +0100] "GET /cgi-bin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:49 +0100] "GET /components/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:49 +0100] "GET /home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:49 +0100] "GET /include/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:01:50 +0100] "GET /modules/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:50 +0100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:01:50 +0100] "GET /mt/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:50 +0100] "GET /site/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:51 +0100] "GET /tmps/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:51 +0100] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:51 +0100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:52 +0100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:52 +0100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:52 +0100] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:53 +0100] "GET /wp-content/languages/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:53 +0100] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:53 +0100] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:54 +0100] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:01:54 +0100] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:01:54 +0100] "GET /wp-includes/ID3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:01:54 +0100] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:01:55 +0100] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:55 +0100] "GET /wp-includes/images/media/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:55 +0100] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:01:56 +0100] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:56 +0100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:56 +0100] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:57 +0100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:57 +0100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:57 +0100] "GET /cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:01:57 +0100] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:15:01:58 +0100] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:58 +0100] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:01:58 +0100] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:01:59 +0100] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:01:59 +0100] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:01:59 +0100] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:00 +0100] "GET /wp-content/plugins/db/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:00 +0100] "GET /wp-content/plugins/home/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:00 +0100] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:01 +0100] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:01 +0100] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:01 +0100] "GET /wp-content/plugins/random/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:02 +0100] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:02:02 +0100] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:15:02:02 +0100] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:02:03 +0100] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:02:03 +0100] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.158.23.230 - - [05/Feb/2026:15:02:03 +0100] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:03 +0100] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:04 +0100] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:04 +0100] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:02:04 +0100] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:05 +0100] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:02:05 +0100] "GET /wp-content/themes/alera/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:15:02:05 +0100] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:02:06 +0100] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:02:06 +0100] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:02:06 +0100] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:07 +0100] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:07 +0100] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:07 +0100] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:07 +0100] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:02:08 +0100] "GET /admin/upload/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:02:08 +0100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:08 +0100] "GET /up/.well-known/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:02:09 +0100] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:09 +0100] "GET /images/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:02:09 +0100] "GET /css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.158.23.230 - - [05/Feb/2026:15:02:10 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:10 +0100] "GET /wp-includes/js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:10 +0100] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:02:10 +0100] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:11 +0100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:11 +0100] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:02:11 +0100] "GET /wp-includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:12 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:02:12 +0100] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:02:12 +0100] "GET /wp-includes/Text/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:13 +0100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:02:13 +0100] "GET /wp-includes/customize/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:13 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:02:14 +0100] "GET /wp-includes/pomo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:14 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:14 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:15 +0100] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.158.23.230 - - [05/Feb/2026:15:02:15 +0100] "GET /about/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:02:15 +0100] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:15 +0100] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:16 +0100] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:16 +0100] "GET /wp-content/plugins/core/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.158.23.230 - - [05/Feb/2026:15:02:16 +0100] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:17 +0100] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:17 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:02:17 +0100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:02:18 +0100] "GET /fonts/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:18 +0100] "GET /js/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:18 +0100] "GET /routes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.158.23.230 - - [05/Feb/2026:15:02:18 +0100] "GET /uploads/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.23.230 - - [05/Feb/2026:15:02:19 +0100] "GET /templates/beez3/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:19 +0100] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.158.23.230 - - [05/Feb/2026:15:02:19 +0100] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:20 +0100] "GET /templates/atomic/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.158.23.230 - - [05/Feb/2026:15:02:20 +0100] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.158.23.230 - - [05/Feb/2026:15:02:20 +0100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.158.23.230 - - [05/Feb/2026:15:02:21 +0100] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:21 +0100] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:21 +0100] "GET /wp-content/maintenance/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:22 +0100] "GET /wp-content/x/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.158.23.230 - - [05/Feb/2026:15:02:22 +0100] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:22 +0100] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:22 +0100] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:23 +0100] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:23 +0100] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:23 +0100] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:24 +0100] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:24 +0100] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.158.23.230 - - [05/Feb/2026:15:02:24 +0100] "GET /.tmb/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:25 +0100] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.158.23.230 - - [05/Feb/2026:15:02:25 +0100] "GET /includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.23.230 - - [05/Feb/2026:15:02:25 +0100] "GET /themes/pridmag/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.23.187.226 - - [05/Feb/2026:15:55:30 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 162.159.119.63 - - [05/Feb/2026:15:55:31 +0100] "GET /favicon.ico HTTP/1.1" 301 162 "http://immopoint-frankfurt.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.68.164.75 - - [05/Feb/2026:16:11:08 +0100] "GET /license.txt HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 104.22.1.199 - - [05/Feb/2026:17:45:08 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.69.71.159 - - [05/Feb/2026:17:45:08 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 104.22.24.143 - - [05/Feb/2026:17:49:03 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.71.22.88 - - [05/Feb/2026:17:49:03 +0100] "GET / HTTP/1.1" 301 162 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 172.70.111.161 - - [05/Feb/2026:20:04:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 172.70.111.84 - - [05/Feb/2026:20:04:56 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" 172.70.111.84 - - [05/Feb/2026:20:04:57 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.70.111.84 - - [05/Feb/2026:20:04:57 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.70.111.84 - - [05/Feb/2026:20:04:57 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.70.111.84 - - [05/Feb/2026:20:04:57 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.70.111.84 - - [05/Feb/2026:20:04:57 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 172.71.184.207 - - [05/Feb/2026:20:18:16 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 104.23.221.137 - - [05/Feb/2026:20:21:02 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 172.70.143.186 - - [05/Feb/2026:20:59:34 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 104.23.221.137 - - [05/Feb/2026:21:06:25 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3" 162.158.108.90 - - [05/Feb/2026:21:06:36 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.69.130.31 - - [05/Feb/2026:22:08:37 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [05/Feb/2026:22:08:38 +0100] "GET /ms-edit.php HTTP/1.1" 301 162 "-" "-" 172.71.148.122 - - [05/Feb/2026:22:24:59 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.70.248.61 - - [05/Feb/2026:22:24:59 +0100] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.184.207 - - [05/Feb/2026:22:40:02 +0100] "GET / HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 172.71.99.115 - - [05/Feb/2026:23:18:52 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.59.228 - - [05/Feb/2026:23:38:26 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 172.69.59.228 - - [05/Feb/2026:23:38:27 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 172.69.59.228 - - [05/Feb/2026:23:38:27 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 172.69.59.228 - - [05/Feb/2026:23:38:27 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.69.59.228 - - [05/Feb/2026:23:38:27 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 172.69.59.228 - - [05/Feb/2026:23:38:27 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 172.69.59.228 - - [05/Feb/2026:23:38:27 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.71.127.137 - - [06/Feb/2026:01:27:01 +0100] "GET / HTTP/1.1" 301 162 "-" "curl/8.7.1" 172.71.126.153 - - [06/Feb/2026:01:29:45 +0100] "GET /js/jquery.flexslider-min.js HTTP/1.1" 301 162 "-" "curl/8.7.1" 141.101.96.58 - - [06/Feb/2026:01:29:47 +0100] "POST / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.119.64 - - [06/Feb/2026:01:29:48 +0100] "POST / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.95.103 - - [06/Feb/2026:01:29:49 +0100] "POST / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.96.58 - - [06/Feb/2026:01:29:49 +0100] "POST / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.97.90 - - [06/Feb/2026:01:29:50 +0100] "POST / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.76.16 - - [06/Feb/2026:01:31:45 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 162.158.183.111 - - [06/Feb/2026:03:33:06 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wp-admin/setup-config.php" 162.158.183.111 - - [06/Feb/2026:03:35:22 +0100] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "http://immopoint-frankfurt.de/wordpress/wp-admin/setup-config.php" 172.71.148.122 - - [06/Feb/2026:04:57:19 +0100] "GET /adminer.php HTTP/1.1" 301 162 "-" "python-requests/2.32.3" 172.71.238.247 - - [06/Feb/2026:08:08:28 +0100] "GET / HTTP/1.1" 301 162 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.110.131 - - [06/Feb/2026:08:14:23 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [06/Feb/2026:08:14:24 +0100] "GET /bgymj.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [06/Feb/2026:08:14:25 +0100] "GET /ws38.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [06/Feb/2026:08:14:25 +0100] "GET /bnn_.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [06/Feb/2026:08:14:26 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [06/Feb/2026:08:14:26 +0100] "GET /166.php HTTP/1.1" 301 162 "-" "-" 172.71.111.8 - - [06/Feb/2026:08:14:26 +0100] "GET /reze.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [06/Feb/2026:08:14:27 +0100] "GET /lib.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [06/Feb/2026:08:14:27 +0100] "GET /wwx.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [06/Feb/2026:08:14:27 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [06/Feb/2026:08:14:28 +0100] "GET /uploaxa1.php HTTP/1.1" 301 162 "-" "-" 172.71.110.131 - - [06/Feb/2026:08:14:28 +0100] "GET /rzzaq.php HTTP/1.1" 301 162 "-" "-" 162.158.138.206 - - [06/Feb/2026:10:21:31 +0100] "GET /wp-content/plugins/profile-builder/assets/css/style-front-end.css HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 13; SM-G991B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" 162.158.138.164 - - [06/Feb/2026:10:23:03 +0100] "GET /wp-content/plugins/profile-builder/assets/css/style-front-end.css HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 13; SM-G991B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" 162.158.38.206 - - [06/Feb/2026:10:26:30 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.159.113.8 - - [06/Feb/2026:10:56:42 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 172.71.172.87 - - [06/Feb/2026:11:02:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "DomainStatsBot/1.0 (https://domainstats.com/pages/our-bot)" 172.71.164.110 - - [06/Feb/2026:11:02:56 +0100] "HEAD / HTTP/1.1" 301 0 "-" "DomainStatsBot/1.0 (https://domainstats.com/pages/our-bot)" 172.71.103.105 - - [06/Feb/2026:11:37:54 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.71.99.52 - - [06/Feb/2026:11:48:46 +0100] "GET / HTTP/1.1" 301 162 "-" "-" 172.70.94.172 - - [06/Feb/2026:13:16:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.69.130.31 - - [06/Feb/2026:14:20:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:06 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:06 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:06 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:07 +0100] "GET /ty.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:07 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:07 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:07 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:07 +0100] "GET /im.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:07 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:08 +0100] "GET /engine.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:08 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:08 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:08 +0100] "GET /include.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:08 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:08 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:09 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:09 +0100] "GET /wp-info.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:09 +0100] "GET /setup-config.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:09 +0100] "GET /6.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:09 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:09 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:09 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:10 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:10 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:10 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:10 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:10 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:10 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "-" "-" 172.69.130.31 - - [06/Feb/2026:14:20:11 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 172.71.134.112 - - [06/Feb/2026:14:38:42 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 141.101.69.71 - - [06/Feb/2026:14:38:43 +0100] "GET /revolutionary-war-land-grants.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 172.70.47.95 - - [06/Feb/2026:15:42:30 +0100] "GET /.svn/wc.db HTTP/1.1" 301 162 "-" "Mozilla/5.0" 172.70.47.95 - - [06/Feb/2026:15:42:32 +0100] "GET /.svn/entries HTTP/1.1" 301 162 "-" "Mozilla/5.0" 104.23.175.157 - - [06/Feb/2026:16:15:51 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 172.69.166.66 - - [06/Feb/2026:16:27:30 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.69.176.90 - - [06/Feb/2026:16:27:35 +0100] "GET /.well-known/ HTTP/1.1" 301 162 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.199.164 - - [06/Feb/2026:18:33:13 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 104.23.199.167 - - [06/Feb/2026:18:33:15 +0100] "GET /horizon-bcbsnj-rx-bin.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 104.23.223.111 - - [06/Feb/2026:18:49:58 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 162.158.49.200 - - [06/Feb/2026:19:15:58 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:01 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:02 +0100] "GET /031.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:02 +0100] "GET /ilex.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:02 +0100] "GET /flex.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:03 +0100] "GET /mlex.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:04 +0100] "GET /wlex.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:04 +0100] "GET /wp-aaa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:05 +0100] "GET /klex.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:05 +0100] "GET /about3.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:06 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:06 +0100] "GET /444.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:07 +0100] "GET /file9.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:07 +0100] "GET /filesss.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:07 +0100] "GET /file88.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:08 +0100] "GET /gifclass4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:08 +0100] "GET /class-wp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:09 +0100] "GET /555.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:10 +0100] "GET /333.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:10 +0100] "GET /class19.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:11 +0100] "GET /2clas.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:11 +0100] "GET /bless5.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:11 +0100] "GET /file15.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:12 +0100] "GET /hk.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:12 +0100] "GET /alpa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:12 +0100] "GET /file21.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:13 +0100] "GET /ssss.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:13 +0100] "GET /ut.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:13 +0100] "GET /inde.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:14 +0100] "GET /classgoto24.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:14 +0100] "GET /030.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:15 +0100] "GET /thh.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:15 +0100] "GET /fffff.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:16 +0100] "GET /indo.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:16 +0100] "GET /fileas.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:17 +0100] "GET /yellow.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:17 +0100] "GET /33.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:17 +0100] "GET /plss3.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:18 +0100] "GET /he.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:18 +0100] "GET /thxt.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:19 +0100] "GET /wfile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:20 +0100] "GET /class20.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:21 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:21 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:21 +0100] "GET /usep.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:22 +0100] "GET /wa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:22 +0100] "GET /wb.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:23 +0100] "GET /file1.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:23 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:23 +0100] "GET /a2.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:24 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:24 +0100] "GET /gmo.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:25 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:25 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:25 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:26 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:26 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:27 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:27 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:28 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:29 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:29 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:29 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:30 +0100] "GET /pp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:32 +0100] "GET /geck.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:32 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:33 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:34 +0100] "GET /cccc.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:34 +0100] "GET /file4.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:35 +0100] "GET /520.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:35 +0100] "GET /CLA.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:36 +0100] "GET /file18.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:36 +0100] "GET /ffile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:37 +0100] "GET /file7.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:37 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:38 +0100] "GET /we.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:38 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:38 +0100] "GET /jlex3.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:39 +0100] "GET /des.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:39 +0100] "GET /aaa.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:40 +0100] "GET /gifclass.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:40 +0100] "GET /vee.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:40 +0100] "GET /efile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:41 +0100] "GET /afile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:41 +0100] "GET /errorfile.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:42 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:42 +0100] "GET /gool.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:42 +0100] "GET /haikh.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:43 +0100] "GET /135.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:43 +0100] "GET /enclas.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:44 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:44 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:45 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:46 +0100] "GET /image.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:46 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:47 +0100] "GET /mail.php? HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:48 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:48 +0100] "GET /max.php HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:48 +0100] "GET /size.php?p= HTTP/1.1" 301 162 "-" "-" 162.158.49.200 - - [06/Feb/2026:19:16:49 +0100] "GET /mpxct.php HTTP/1.1" 301 162 "-" "-" 104.23.211.195 - - [06/Feb/2026:19:51:38 +0100] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" 104.23.211.195 - - [06/Feb/2026:19:51:39 +0100] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 104.23.211.229 - - [06/Feb/2026:19:51:39 +0100] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" 104.23.211.229 - - [06/Feb/2026:19:51:39 +0100] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 104.23.211.229 - - [06/Feb/2026:19:51:39 +0100] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" 104.23.211.229 - - [06/Feb/2026:19:51:40 +0100] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 104.23.211.229 - - [06/Feb/2026:19:51:40 +0100] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:10:51 +0100] "GET /about/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:51 +0100] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.35 - - [06/Feb/2026:20:10:52 +0100] "GET /aa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:52 +0100] "GET /wp-file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:52 +0100] "GET /wp-admin/network/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.35 - - [06/Feb/2026:20:10:53 +0100] "GET /chosen.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:53 +0100] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.35 - - [06/Feb/2026:20:10:53 +0100] "GET /num.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:53 +0100] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:53 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:54 +0100] "GET /edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:54 +0100] "GET /chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:54 +0100] "GET /atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.35 - - [06/Feb/2026:20:10:54 +0100] "GET /index/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.35 - - [06/Feb/2026:20:10:54 +0100] "GET /bolt.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.35 - - [06/Feb/2026:20:10:55 +0100] "GET /mah/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:55 +0100] "GET /classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:55 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:55 +0100] "GET /wp-good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.35 - - [06/Feb/2026:20:10:56 +0100] "GET /hplfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.35 - - [06/Feb/2026:20:10:56 +0100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.35 - - [06/Feb/2026:20:10:56 +0100] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:10:57 +0100] "GET /themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:10:57 +0100] "GET /sts.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:10:57 +0100] "GET /file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:10:57 +0100] "GET /wp-signin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:10:57 +0100] "GET /wp-content/admin-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:10:58 +0100] "GET /wp-blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:10:58 +0100] "GET /adminfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:10:58 +0100] "GET /ahax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:10:58 +0100] "GET /autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:10:59 +0100] "GET /mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:10:59 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:10:59 +0100] "GET /mah/function.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:00 +0100] "GET /akcc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:00 +0100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:01 +0100] "GET /404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:01 +0100] "GET /form.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:01 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:11:01 +0100] "GET /x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:01 +0100] "GET /test.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:02 +0100] "GET /k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:02 +0100] "GET /wp-content/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:02 +0100] "GET /admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:02 +0100] "GET /bless.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:03 +0100] "GET /about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:03 +0100] "GET /403.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:03 +0100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:03 +0100] "GET /goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:04 +0100] "GET /ioxi-o.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:04 +0100] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:04 +0100] "GET /alfa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:11:04 +0100] "GET /wp-themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:05 +0100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:05 +0100] "GET /wp-admin/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:11:05 +0100] "GET /defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:05 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:11:06 +0100] "GET /gel4y.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:11:06 +0100] "GET /fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:06 +0100] "GET /autoload_classmap/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:06 +0100] "GET /wp-links-opml.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:11:06 +0100] "GET /radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:11:07 +0100] "GET /simple.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:07 +0100] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:11:07 +0100] "GET /manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:07 +0100] "GET /admin.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:07 +0100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:11:08 +0100] "GET /av.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:08 +0100] "GET /buy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:08 +0100] "GET /dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:08 +0100] "GET /vx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:09 +0100] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:09 +0100] "GET /xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:09 +0100] "GET /wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:11:09 +0100] "GET /inputs.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:09 +0100] "GET /wp-includes/Text/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:11:10 +0100] "GET /new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:10 +0100] "GET /function/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:10 +0100] "GET /inputs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:10 +0100] "GET /options-reading.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:10 +0100] "GET /abcd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:11 +0100] "GET /wp-editor.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:11 +0100] "GET /ws.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:11 +0100] "GET /wp-admin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:11 +0100] "GET /yas.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:11 +0100] "GET /admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:12 +0100] "GET /ioxi002.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:12 +0100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:12 +0100] "GET /wp-mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:12 +0100] "GET /install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:12 +0100] "GET /item.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:13 +0100] "GET /www.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:11:13 +0100] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:13 +0100] "GET /wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:13 +0100] "GET /num.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:13 +0100] "GET /default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:11:14 +0100] "GET /z.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:14 +0100] "GET /past.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:14 +0100] "GET /.well-known/acme-challenge/xa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:14 +0100] "GET /system_log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:14 +0100] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:15 +0100] "GET /makeasmtp.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:15 +0100] "GET /shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:15 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:15 +0100] "GET /as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:16 +0100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:16 +0100] "GET /wp-atom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:16 +0100] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:16 +0100] "GET /wp-admin/network/natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:11:16 +0100] "GET /moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:17 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:17 +0100] "GET /wp-content/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:11:17 +0100] "GET /mah.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:17 +0100] "GET /shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:17 +0100] "GET /wp-content/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:18 +0100] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:18 +0100] "GET /wp-user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [06/Feb/2026:20:11:18 +0100] "GET /nc4.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:18 +0100] "GET /wp-content/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:18 +0100] "GET /content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:19 +0100] "GET /mini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:19 +0100] "GET /nf_tracking.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:11:19 +0100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:19 +0100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:11:19 +0100] "GET /wp-admin/images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:20 +0100] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:20 +0100] "GET /a.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:20 +0100] "GET /hilk.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:20 +0100] "GET /lv.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:20 +0100] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:21 +0100] "GET /worksec.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:21 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:21 +0100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:11:21 +0100] "GET /autoload_classmap.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:21 +0100] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:22 +0100] "GET /asasx.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:22 +0100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:11:22 +0100] "GET /wp-content/blue.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:22 +0100] "GET /elp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:22 +0100] "GET /manager.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:23 +0100] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:23 +0100] "GET /api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:23 +0100] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:11:23 +0100] "GET /load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:23 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:24 +0100] "GET /wp-trackback.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:24 +0100] "GET /cgi-bin/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:24 +0100] "GET /makeasmtp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:24 +0100] "GET /wp-admin/maint/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:24 +0100] "GET /class.api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:11:25 +0100] "GET /wp-includes/Text/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:25 +0100] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:25 +0100] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:25 +0100] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:25 +0100] "GET /about.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:26 +0100] "GET /doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:26 +0100] "GET /xx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:11:26 +0100] "GET /akcc.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:26 +0100] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:27 +0100] "GET /wp-includes/assets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:27 +0100] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:11:27 +0100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:27 +0100] "GET /cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:27 +0100] "GET /images/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:28 +0100] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:28 +0100] "GET /gg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:28 +0100] "GET /wp-content/1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:28 +0100] "GET /wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:28 +0100] "GET /wp-content/themes/too.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:29 +0100] "GET /contact.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:29 +0100] "GET /rzki.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [06/Feb/2026:20:11:29 +0100] "GET /dropdown.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:11:29 +0100] "GET /admin/upload/css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:29 +0100] "GET /wp-conflg/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:11:30 +0100] "GET /wp-admin/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:30 +0100] "GET /fm1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:30 +0100] "GET /up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:30 +0100] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:30 +0100] "GET /cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:31 +0100] "GET /wp-content/hplfuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:31 +0100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:31 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:31 +0100] "GET /packed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:31 +0100] "GET /admin.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:11:32 +0100] "GET /classwithtostring.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:32 +0100] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:32 +0100] "GET /wp-2019.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:32 +0100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:11:32 +0100] "GET /w.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:33 +0100] "GET /option-old.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:33 +0100] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:33 +0100] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:33 +0100] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:11:33 +0100] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:34 +0100] "GET /cord.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:34 +0100] "GET /xleet.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:34 +0100] "GET /wp-links.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:34 +0100] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:11:34 +0100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:35 +0100] "GET /wp-content/admin.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:35 +0100] "GET /wp-content/plugins/xc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:35 +0100] "GET /alfanew.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:35 +0100] "GET /wp-includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:35 +0100] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:36 +0100] "GET /images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:36 +0100] "GET /file5.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:36 +0100] "GET /file2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:36 +0100] "GET /.well-known/wso112233.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:37 +0100] "GET /wp-includes/sitemaps/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:37 +0100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:37 +0100] "GET /file-manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:37 +0100] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:37 +0100] "GET /ar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:11:38 +0100] "GET /Sanskrit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:38 +0100] "GET /lock360.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:38 +0100] "GET /alfa-rex.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:38 +0100] "GET /elp.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:11:38 +0100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:11:39 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:39 +0100] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:11:39 +0100] "GET /m.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:39 +0100] "GET /robots.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:39 +0100] "GET /wp-content/xc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:40 +0100] "GET /alfanew.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:40 +0100] "GET /b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:11:40 +0100] "GET /tx20.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:40 +0100] "GET /function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:40 +0100] "GET /wp-content/packed.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:11:41 +0100] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:41 +0100] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:41 +0100] "GET /files.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:41 +0100] "GET /wso112233.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:42 +0100] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:42 +0100] "GET /moon.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:42 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:42 +0100] "GET /wp-conflg/function.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:42 +0100] "GET /wp-content/plugins/ubh/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:43 +0100] "GET /asasx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:43 +0100] "GET /images/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:43 +0100] "GET /natural.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:43 +0100] "GET /wp-includes/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:43 +0100] "GET /wp-configs.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:44 +0100] "GET /geju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:44 +0100] "GET /test1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:44 +0100] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:44 +0100] "GET /wp-includes/style-engine/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:44 +0100] "GET /mar.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:45 +0100] "GET /woh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:45 +0100] "GET /xc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:45 +0100] "GET /log.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:45 +0100] "GET /app.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:45 +0100] "GET /inc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:11:46 +0100] "GET /NewFile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:11:46 +0100] "GET /wp-admin/js/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:46 +0100] "GET /a.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:46 +0100] "GET /license.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:11:46 +0100] "GET /options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:47 +0100] "GET /ALFA_DATA/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:47 +0100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [06/Feb/2026:20:11:47 +0100] "GET /xxx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:47 +0100] "GET /good.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:48 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:48 +0100] "GET /wp-content/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:48 +0100] "GET /wp-includes/block-supports/layout.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:48 +0100] "GET /wp-content/plugins/linkpreview/j.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:48 +0100] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [06/Feb/2026:20:11:49 +0100] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:49 +0100] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:49 +0100] "GET /ini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:49 +0100] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:49 +0100] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:50 +0100] "GET /leaf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:11:50 +0100] "GET /t.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:50 +0100] "GET /wp-content/themes/pridmag/fr.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:50 +0100] "GET /wp-content/languages/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:11:50 +0100] "GET /about.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:51 +0100] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:51 +0100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:51 +0100] "GET /wp-content/content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:11:51 +0100] "GET /wp-includes/block-supports/generated-classname.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:51 +0100] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:52 +0100] "GET /gm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:52 +0100] "GET /wp-admin/maint/users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:52 +0100] "GET /fw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:52 +0100] "GET /10.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:52 +0100] "GET /admin/function.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:53 +0100] "GET /wp-includes/js/tinymce/skins/alfa-rex.php8 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:53 +0100] "GET /about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:53 +0100] "GET /wp-content/themes/astra/inc/ki1k.php/js/fm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:53 +0100] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:53 +0100] "GET /wp-content/updates.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:11:54 +0100] "GET /tx24.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:54 +0100] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:54 +0100] "GET /wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:54 +0100] "GET /akc.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:11:54 +0100] "GET /404.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:55 +0100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:55 +0100] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:55 +0100] "GET /repeater.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:55 +0100] "GET /p.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:55 +0100] "GET /shell.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:56 +0100] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:56 +0100] "GET /222.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:11:56 +0100] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:56 +0100] "GET /xxl.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:56 +0100] "GET /wp2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:57 +0100] "GET /sitemap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:57 +0100] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:57 +0100] "GET /wp-content/wp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:57 +0100] "GET /build.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:58 +0100] "GET /wp-includes/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:58 +0100] "GET /uploads/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:58 +0100] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:58 +0100] "GET /wp-includes/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:58 +0100] "GET /assets/images/niil.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:59 +0100] "GET /wp-content/themes/astra/inc/ki1k.ph HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:11:59 +0100] "GET /p/wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:11:59 +0100] "GET /js/fm.php/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:11:59 +0100] "GET /bak.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:11:59 +0100] "GET /lf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:00 +0100] "GET /bala.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:00 +0100] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:00 +0100] "GET /blog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:00 +0100] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:01 +0100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:01 +0100] "GET /wp-includes/wp-load.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:01 +0100] "GET /cux.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:01 +0100] "GET /.well-known/pki-validation/upfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:01 +0100] "GET /readme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:12:02 +0100] "GET /Njima.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:12:02 +0100] "GET /hehehehe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:02 +0100] "GET /fm.php?fm=true HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:12:02 +0100] "GET /r.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:03 +0100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:03 +0100] "GET /.well-known/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:03 +0100] "GET /.well-known/acme-challenge/my1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:03 +0100] "GET /wp-admin/shell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [06/Feb/2026:20:12:04 +0100] "GET /click.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:04 +0100] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:04 +0100] "GET /cc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:12:04 +0100] "GET /wp-22.php?sxallsitemap.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [06/Feb/2026:20:12:05 +0100] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:05 +0100] "GET /wp-admin/options.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:05 +0100] "GET /smm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:05 +0100] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:05 +0100] "GET /wso-x569.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:06 +0100] "GET /header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:12:06 +0100] "GET /wp-admin/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:06 +0100] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:06 +0100] "GET /a1vx.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:06 +0100] "GET /wp-activate.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:12:07 +0100] "GET /wp-includes/Requests/Proxy/HTTP.term.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:12:07 +0100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:07 +0100] "GET /.well-known/pki-validation/dbform69.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:07 +0100] "GET /class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:07 +0100] "GET /wp-admin/js/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:12:08 +0100] "GET /wp_class_datalib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:08 +0100] "GET /wp-includes/block-supports/utils.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:08 +0100] "GET /assets/images/doc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:08 +0100] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:08 +0100] "GET /kex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:09 +0100] "GET /function/function.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:09 +0100] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:12:09 +0100] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:09 +0100] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:10 +0100] "GET /about.php?525 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:12:10 +0100] "GET /wp.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:10 +0100] "GET /wp-admin/custom-plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:10 +0100] "GET /wp-includes/pomo/db-update.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:10 +0100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:11 +0100] "GET /css.php/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:11 +0100] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:11 +0100] "GET /goat.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:12:11 +0100] "GET /edit-tags.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:12:11 +0100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:12 +0100] "GET /wp-content/plugins/erinyani/asasx.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:12:12 +0100] "GET /wp-comments.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:12 +0100] "GET /wp-includes/SimplePie/ini_db_model.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:12 +0100] "GET /tx17.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:12 +0100] "GET /wp-content/goods.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:13 +0100] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:13 +0100] "GET /about.php?520 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:13 +0100] "GET /admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:13 +0100] "GET /footer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:13 +0100] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:14 +0100] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:14 +0100] "GET /dex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:14 +0100] "GET /.well-known/pki-validation/muse.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:14 +0100] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:14 +0100] "GET /02.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:15 +0100] "GET /f35.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:12:15 +0100] "GET /randkeyword.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:15 +0100] "GET /wsoyanz.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:16 +0100] "GET /wp-content/themes/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:16 +0100] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:16 +0100] "GET /Yanzmini.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:12:16 +0100] "GET /app/webroot/filemanager.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:17 +0100] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:17 +0100] "GET /wp-content/themes/newsfeed-theme/bbh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:17 +0100] "GET /0.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:17 +0100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:17 +0100] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:18 +0100] "GET /million.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:18 +0100] "GET /wp-content/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:18 +0100] "GET /ava.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:18 +0100] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:18 +0100] "GET /wp-content/user-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:19 +0100] "GET /system.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:19 +0100] "GET /uplozvb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:19 +0100] "GET /wp-content/themes/about.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:19 +0100] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:19 +0100] "GET /wp-admin/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:12:20 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:12:20 +0100] "GET /network_xo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:12:20 +0100] "GET /22.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:20 +0100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:20 +0100] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:12:21 +0100] "GET /wp-admin/network/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:12:21 +0100] "GET /gecko.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:21 +0100] "GET /wp-admin/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:12:21 +0100] "GET /wp-admin/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:12:21 +0100] "GET /wp-admin/x.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:22 +0100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:22 +0100] "GET /ioxi-rex4.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:22 +0100] "GET /classwithtostring.php/rbzccnnp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:22 +0100] "GET /buy.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:22 +0100] "GET /wp-pano.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:23 +0100] "GET /lufix.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:23 +0100] "GET /an.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:23 +0100] "GET /about/function.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:23 +0100] "GET /wp-content/edit.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:23 +0100] "GET /klbnm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:24 +0100] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:24 +0100] "GET /.well-known/pki-validation/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:24 +0100] "GET /lock360.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:24 +0100] "GET /sim.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:24 +0100] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:25 +0100] "GET /wp-includes/block-supports/custom-classname.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:25 +0100] "GET /db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:25 +0100] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:12:25 +0100] "GET /.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:25 +0100] "GET /css/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:26 +0100] "GET /alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:26 +0100] "GET /wp-add-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:26 +0100] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:26 +0100] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:27 +0100] "GET /wp-includes/SimplePie/db_model.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:27 +0100] "GET /v.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:27 +0100] "GET /k.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:27 +0100] "GET /22.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:27 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:12:28 +0100] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:28 +0100] "GET /tyasd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:28 +0100] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:12:28 +0100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:28 +0100] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:29 +0100] "GET /mail.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:29 +0100] "GET /.tmb/mariju.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:29 +0100] "GET /wp-content/themes/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:29 +0100] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:12:29 +0100] "GET /ioxi002.PhP7/wp-admin/images/Mhbgf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:12:30 +0100] "GET /xtride.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:12:30 +0100] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:30 +0100] "GET /WSO.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:30 +0100] "GET /user.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:30 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:31 +0100] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:31 +0100] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:31 +0100] "GET /users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:31 +0100] "GET /wp-content/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:31 +0100] "GET /edit.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:12:32 +0100] "GET /t.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:12:32 +0100] "GET /style.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:32 +0100] "GET /link.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:32 +0100] "GET /koko.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:12:32 +0100] "GET /ioxi2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:33 +0100] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:33 +0100] "GET /rss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:33 +0100] "GET /text.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:33 +0100] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:12:34 +0100] "GET /flower.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:34 +0100] "GET /wp-includes/Requests/src/Hooks.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:12:34 +0100] "GET /wp-admin/fmadmin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:34 +0100] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:12:34 +0100] "GET /ok.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:35 +0100] "GET /wp-includes/customize/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:35 +0100] "GET /classsmtps.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:35 +0100] "GET /backup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:35 +0100] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:35 +0100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:36 +0100] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:36 +0100] "GET /asgoxtyad2mjhno6ds4ikvhdCakc128.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:36 +0100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:36 +0100] "GET /404.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:36 +0100] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:37 +0100] "GET /gtc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:12:37 +0100] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:37 +0100] "GET /wp-content/plugins/wp-file-manager/file_folder_manager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:37 +0100] "GET /index/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:37 +0100] "GET /s.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:38 +0100] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:38 +0100] "GET /help.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:38 +0100] "GET /css.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:12:38 +0100] "GET /wp-includes/css/db_model.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:38 +0100] "GET /av.php%20s HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:39 +0100] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:39 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:39 +0100] "GET /footers.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:39 +0100] "GET /wp-head.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:39 +0100] "GET /wp-admin/dropdown.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.124.48 - - [06/Feb/2026:20:12:40 +0100] "GET /mm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:40 +0100] "GET /wp-content/plugins/mainhosting/asasx.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:12:40 +0100] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:40 +0100] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:40 +0100] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:41 +0100] "GET /wp-admin/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:41 +0100] "GET /mailer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:41 +0100] "GET /aaa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:41 +0100] "GET /filemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:41 +0100] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:42 +0100] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:42 +0100] "GET /wp-content/themes/admin.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:42 +0100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:42 +0100] "GET /MARIJUANA.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:12:42 +0100] "GET /mln.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:43 +0100] "GET /wp-admin/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:43 +0100] "GET /vx.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:43 +0100] "GET /gawean.PhP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:43 +0100] "GET /ioxi01.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:43 +0100] "GET /ms.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:12:44 +0100] "GET /u.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:44 +0100] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:44 +0100] "GET /wp-config-sample.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:44 +0100] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:44 +0100] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:45 +0100] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:45 +0100] "GET /jga.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:45 +0100] "GET /filemanager.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:45 +0100] "GET /xy.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:45 +0100] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:46 +0100] "GET /okxh.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:46 +0100] "GET /.well-known/pki-validation/xl2023.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:46 +0100] "GET /j.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:46 +0100] "GET /wp-includes/blocks/tag-cloud/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:46 +0100] "GET /wp-includes/pomo/bru.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:47 +0100] "GET /wp-user.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:47 +0100] "GET /.well-known/acme-challenge/muse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:47 +0100] "GET /error.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:12:47 +0100] "GET /gelay.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:12:47 +0100] "GET /epinyins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:48 +0100] "GET /wp-content/uploads/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:48 +0100] "GET /images/class-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:12:48 +0100] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:48 +0100] "GET /wp-includes/theme-compat/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:48 +0100] "GET /root.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:49 +0100] "GET /chosen/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:49 +0100] "GET /bolt.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:12:49 +0100] "GET /wp-admin/images/moon.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:49 +0100] "GET /cgi-bin/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:50 +0100] "GET /wp-content/plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:12:50 +0100] "GET /wp-admin/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:50 +0100] "GET /byp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:50 +0100] "GET /wp-includes/images/smilies/about.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:50 +0100] "GET /e.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:51 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:51 +0100] "GET /wp-includes/PHPMailer/PHPMailer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:51 +0100] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:51 +0100] "GET /9.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:51 +0100] "GET /wp-content/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:52 +0100] "GET /wp-content/plugins/mainhosting/default.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:52 +0100] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:12:52 +0100] "GET /xmlrpc.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:52 +0100] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:52 +0100] "GET /wp-admin/images/Mhbgf.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:53 +0100] "GET /wsa.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:53 +0100] "GET /fie.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:53 +0100] "GET /wp-includes/mah.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:53 +0100] "GET /wp-includes/Requests/src/HookManager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:53 +0100] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:54 +0100] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:54 +0100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:54 +0100] "GET /layout.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:54 +0100] "GET /admin.php?attempt=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:54 +0100] "GET /ioxi-rex3.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:55 +0100] "GET /wp-content/themes/alera/alpha.php?u?u HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:55 +0100] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:55 +0100] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:55 +0100] "GET /wp-includes/ID3/ini_user-info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:55 +0100] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:12:56 +0100] "GET /fm.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:56 +0100] "GET /wp-admin/user/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:56 +0100] "GET /wp-setup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:12:56 +0100] "GET /wp-includes/js/500.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:12:56 +0100] "GET /kly1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:12:57 +0100] "GET /network.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:57 +0100] "GET /13.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:57 +0100] "GET /ioxi-rex5.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:57 +0100] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:12:57 +0100] "GET /wp-includes/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:58 +0100] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:12:58 +0100] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:58 +0100] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:58 +0100] "GET /ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:12:58 +0100] "GET /wp-content.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:59 +0100] "GET /shx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:12:59 +0100] "GET /priv8.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:12:59 +0100] "GET /wp-blog-header.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:12:59 +0100] "GET /wp-includes/ID3/user-info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:12:59 +0100] "GET /wp-admin/users.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [06/Feb/2026:20:13:00 +0100] "GET /browse.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:00 +0100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:13:00 +0100] "GET /n.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:00 +0100] "GET /.bod/.ll/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:13:01 +0100] "GET /up4.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:13:01 +0100] "GET /wp-includes/Requests/src/Utility/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:01 +0100] "GET /sx.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:01 +0100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:01 +0100] "GET /zz.php/wp-includes/wp-includes_function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:02 +0100] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:13:02 +0100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:02 +0100] "GET /wp-includes/SimplePie/Registry.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:02 +0100] "GET /wp-admin/setup-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:02 +0100] "GET /assets/atomlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:13:03 +0100] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:13:03 +0100] "GET /goods.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:03 +0100] "GET /wp-content/banners/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:03 +0100] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:13:03 +0100] "GET /wp-includes/pomo/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:04 +0100] "GET /2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:13:04 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:04 +0100] "GET /wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:13:04 +0100] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:05 +0100] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:13:05 +0100] "GET /ds.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 172.71.124.48 - - [06/Feb/2026:20:13:05 +0100] "GET /randkeyword.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:13:05 +0100] "GET /file.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:13:05 +0100] "GET /wp-includes/wp-conflg.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:13:06 +0100] "GET /wb.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:06 +0100] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:13:06 +0100] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:06 +0100] "GET /wander.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:06 +0100] "GET /wp-admin/admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:07 +0100] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:07 +0100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:07 +0100] "GET /assets/as.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:07 +0100] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:07 +0100] "GET /wp-admin/shapes.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:08 +0100] "GET /wp_wrong_datlib.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:08 +0100] "GET /wp-admin/images/install.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:08 +0100] "GET /wp-content/radio.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:08 +0100] "GET /blog/fw.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:13:08 +0100] "GET /alfanew.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:09 +0100] "GET /plugin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 172.71.124.48 - - [06/Feb/2026:20:13:09 +0100] "GET /admin.php?fm=true HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:09 +0100] "GET /wp-crom.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:09 +0100] "GET /ee.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:09 +0100] "GET /al.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:13:10 +0100] "GET /simple/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:10 +0100] "GET /images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:10 +0100] "GET /uploxe.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:10 +0100] "GET /login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:10 +0100] "GET /wp-cron.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:11 +0100] "GET /core.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:11 +0100] "GET /wp-includes/images/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:11 +0100] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:13:11 +0100] "GET /pvafcbhg.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:11 +0100] "GET /l.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:13:12 +0100] "GET /wp-content/defaults.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:12 +0100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:12 +0100] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:12 +0100] "GET /cmd.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:13:12 +0100] "GET /filemanager/dialog.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:13 +0100] "GET /.well-known/pki-validation/nxc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:13:13 +0100] "GET /i.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:13 +0100] "GET /man.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:13 +0100] "GET /batm.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 172.71.124.48 - - [06/Feb/2026:20:13:13 +0100] "GET /wp-content/uploads/2018/12/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 172.71.124.48 - - [06/Feb/2026:20:13:14 +0100] "GET /wp/wp-content/themes/twentytwentyfive/wpc.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:14 +0100] "GET /moddofuns.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:14 +0100] "GET /as/function.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:14 +0100] "GET /plugins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:15 +0100] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:15 +0100] "GET /test.php?p= HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:13:15 +0100] "GET /gfile.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:15 +0100] "GET /file.php?fm=true HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:15 +0100] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 172.71.124.48 - - [06/Feb/2026:20:13:16 +0100] "GET /alfanew.PHP7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:16 +0100] "GET /st.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:16 +0100] "GET /upload/JustBrain.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.71.124.48 - - [06/Feb/2026:20:13:16 +0100] "GET /config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:16 +0100] "GET /img/nxc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:17 +0100] "GET /f.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:17 +0100] "GET /c.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:17 +0100] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:17 +0100] "GET /wp-signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:13:17 +0100] "GET /akc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 172.71.124.48 - - [06/Feb/2026:20:13:18 +0100] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 172.71.124.48 - - [06/Feb/2026:20:13:18 +0100] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:18 +0100] "GET /adin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:18 +0100] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:13:18 +0100] "GET /wp-content/plugins/apikey/1.php?f=f HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:13:19 +0100] "GET /alfanew2.php7 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:13:19 +0100] "GET /alf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 172.71.124.48 - - [06/Feb/2026:20:13:19 +0100] "GET /wp-content/lock11.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:19 +0100] "GET /go.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 172.71.124.48 - - [06/Feb/2026:20:13:19 +0100] "GET /.well-known/fierzashell.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:20 +0100] "GET /wso2.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:20 +0100] "GET /wp-content/plugins/ss.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:20 +0100] "GET /user-new.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:20 +0100] "GET /signup.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.71.124.48 - - [06/Feb/2026:20:13:21 +0100] "GET /wp-lock.php?fm=true HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 172.71.124.48 - - [06/Feb/2026:20:13:21 +0100] "GET /beence.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:21 +0100] "GET /7.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:21 +0100] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:21 +0100] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:22 +0100] "GET /post.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.71.124.48 - - [06/Feb/2026:20:13:22 +0100] "GET /jp.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.124.48 - - [06/Feb/2026:20:13:22 +0100] "GET /wp-content/style-css.php HTTP/1.1" 301 162 "-" "